Vernon & Waldrep Listed by Global Secret Group Ransomware Group

On August 1, 2026, the ransomware group Global Secret Group listed Vernon & Waldrep on its leak site, claiming the Texas-based mental health practice was hit by a ransomware attack and that 274 GB of internal files had been exfiltrated. The organization, which operates as a small physician group specializing in mental health services, has not publicly confirmed the incident as of this writing. According to the leak-site listing, the data consists of 56,006 files organized in 3,421 folders.

Details from the Leak-Site Listing

The primary disclosure comes exclusively from Global Secret Group’s own leak site, hosted on an onion address and aggregated on ransomware.live. The entry states that Vernon & Waldrep, a practice with 21–50 employees and roughly $5 million in revenue, had its internal files taken during a ransomware incident. The listing does not specify what categories of sensitive information were included, nor does it name the exact number of patients or individuals whose records may have been affected. It simply presents the volume of data and the file count as evidence of successful exfiltration. Because the claim originates solely from the threat actor’s platform and Vernon & Waldrep has issued no official breach notification, this remains an unconfirmed claim rather than an established breach.

Why This Matters for You and Your Family

If you or a family member has received care from Vernon & Waldrep in Texas, your protected health information may be at risk. Mental health records are among the most sensitive categories of personal data; they can include diagnoses, treatment notes, medication histories, and intimate personal details that many people prefer to keep strictly private. Even though the exact number of affected records is unknown, the 274 GB volume suggests a substantial portion of the practice’s digital files were taken. For ordinary families, this translates into heightened risk of identity theft, insurance fraud, blackmail, or simply the permanent exposure of deeply personal information that cannot be “taken back” once leaked.

Doxxing and Identity-Chain Risks

Mental health records rarely exist in isolation. They are frequently linked to names, dates of birth, Social Security numbers, insurance details, home addresses, phone numbers, and email accounts. Threat actors and data brokers routinely combine these fragments into full identity profiles. A single leaked mental-health document can become the anchor that connects disparate online handles, family relationships, and even children’s gaming accounts. Once those links are established, opportunistic criminals can pursue account takeovers, targeted phishing, or public doxxing campaigns. Credential leaks of this nature frequently cascade far beyond the original victim organization.

Global Secret Group’s Known Track Record

Public reporting attributes Global Secret Group as a relatively new ransomware/extortion operation that emerged in late 2025. The group follows a double-extortion model: it encrypts victim systems and simultaneously exfiltrates data before demanding payment to prevent publication. Prior victims have included small-to-medium healthcare providers, professional service firms, and regional businesses. The group’s typical playbook involves initial access through phishing or exploited remote desktop services, followed by lateral movement, data archiving, and then pressure through both encryption and public leak-site listings. Like many contemporary ransomware actors, Global Secret Group sets short deadlines and escalates by releasing sample files when victims do not pay.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains back to the Vernon & Waldrep records.
• Rotate any password you ever used at Vernon & Waldrep or any related healthcare portal, and enable 2FA using an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 15.4 billion breach records and more than 100 platforms so the next exposure of your information is caught in hours instead of months.
• Cover your entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that often become targets once a parent’s mental-health or personal records surface.
• Let DoxxScan remediation specialists manage data-broker takedown requests and opt-out processes on your behalf instead of attempting manual removal across dozens of sites.

The most important forward step is treating this unconfirmed claim as a signal that your or your family’s mental health or personal records could already be circulating in criminal circles. Continuous visibility and hands-on remediation remain the practical defense. DoxxScan by GalaxyWarden delivers exactly that combination: continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and direct specialist support for takedowns, including protection for both adult and children’s gaming accounts that frequently chain back to household identities.