WestcoastSmile Dental Studio Listed by medusa Ransomware Group

On April 23, 2023, WestcoastSmile Kitsilano Dental Studio appeared on the Medusa ransomware group’s leak site. The Vancouver-based dental practice, located at 1-1874 W 1st Ave, is now among the victims whose internal files were allegedly exfiltrated during a ransomware attack. The listing does not specify how many patients or staff are affected, nor does it detail the exact volume or types of records taken.

Details from the Medusa Listing

The Medusa leak site states that WestcoastSmile suffered a ransomware incident in which attackers gained access to the clinic’s network and removed internal files before encrypting systems. The disclosure indicates that the practice, run by Dr. Jeffrey Jordan and established more than 20 years ago, failed to meet the group’s demands. As a result, a sample of the stolen data was published. The listing does not quantify affected records and does not name specific data categories such as patient names, addresses, Social Insurance Numbers, dental charts, or payment details. It simply states that internal files were exfiltrated.

Why This Matters for You and Your Family

If you or your family members have been patients at WestcoastSmile Kitsilano Dental Studio, your personal and health information may now sit in an attacker’s archive. Dental records often contain full names, dates of birth, contact information, insurance details, treatment histories, and sometimes Social Insurance Numbers or credit-card receipts. Once such data leaves a regulated clinic environment it becomes far harder to control. Families with children who have visited the practice should be especially alert, because a single breach can expose multiple generations at once. The disclosure makes clear that the breach is real; the only unknown is the precise scale.

Doxxing and Identity-Chain Risks

Stolen dental files rarely stay isolated. Attackers and subsequent buyers frequently combine them with other leaks to build detailed identity profiles. An email address taken from a patient file can be matched to gaming accounts, social-media handles, or school records. This creates an identity chain that leads directly to you and your household. Public reporting on similar incidents shows that health-sector data is prized precisely because it provides high-confidence links between online personas and real-world identities. Children’s gaming accounts are especially vulnerable in these chains because parents often reuse credentials or recovery email addresses tied to family medical providers. The result is accelerated doxxing, account takeovers, and targeted fraud that can follow a family for years.

Medusa’s Known Track Record

Public reporting attributes Medusa with emerging in mid-2021 as a ransomware-as-a-service operation. The group has targeted organizations across North America, Europe, and Asia, with notable prior victims including manufacturing firms, healthcare providers, and professional service companies. Their typical playbook begins with initial access gained through compromised remote desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, Medusa waits a short period before publishing samples on their leak site if payment is not received. The group’s extortion style combines technical encryption with public shaming, releasing increasing volumes of data until the victim pays or the listing expires. The WestcoastSmile listing fits this pattern exactly.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains back to the WestcoastSmile breach.
• Rotate any password you ever used at the dental studio or on any site sharing those credentials, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts commonly targeted after medical leaks.
• Let DoxxScan remediation specialists manage takedown requests for any exposed personal documents that surface on data-broker or extortion sites.

The WestcoastSmile breach is a reminder that even long-established local clinics can become gateways to identity theft for entire families. Acting quickly on the exposure you know about today limits how far attackers can travel down the identity chain tomorrow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts at risk from credential leaks like this one.