On May 30, 2024, Canadian healthcare provider Indigo ENT Group was listed on the leak site of the qiulong ransomware group. The operators claim they spent recent weeks inside the company’s network, exfiltrating thousands of patient records containing personal, confidential, PHI and PII data. The listing marks the first public warning to the Coquitlam, British Columbia-based ear, nose and throat practice, whose patients now face the direct risk that their medical and personal information has been stolen and may be published or sold.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch indigoent.ca
Get alerted the next time indigoent.ca files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about indigoent.ca’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Leak Site
The qiulong leak page states that its operators gained access to Indigo ENT’s systems and removed large volumes of internal files. It explicitly lists patient PHI and PII among the stolen material but does not publish the total number of affected individuals or name every file type taken. The disclosure identifies the company’s headquarters in Coquitlam and provides contact details that match public business records. No ransom amount or payment deadline appears in the initial listing, which simply labels the post as the first warning. The incident is classified as a ransomware attack followed by data exfiltration, consistent with the group’s standard double-extortion approach.
Why This Matters for You and Your Family
If you or a family member have been treated by Dr. Dewji, Dr. Gooi, Dr. Mah or any other clinician at Indigo ENT, your medical history, contact information, and government identifiers may now sit in attackers’ hands. Healthcare data is especially damaging because it combines sensitive diagnoses with financial and personal details that can be used for insurance fraud, identity theft, or targeted phishing. Even when the exact number of records remains unknown, the exposure of PHI creates long-term risk for every patient whose file was stored on the compromised systems.
Doxxing and Identity-Chain Risks
Stolen healthcare records rarely stay isolated. Threat actors routinely cross-reference patient names, addresses, phone numbers, and email addresses with other breached datasets. This creates an identity chain that can link your doctor’s notes to gaming accounts, social-media handles, or family-member profiles. Children’s records are particularly vulnerable because parents often reuse credentials across personal and family services. A single leaked email or phone number can cascade into account takeovers that expose private messages, location history, or financial logins. The longer these connections remain unmapped, the higher the chance that opportunistic criminals or extortionists will locate and target you or your children.