Belmont Plastic Surgery Listed by insomnia Ransomware Group

On February 24, 2026, Belmont Plastic Surgery appeared on the leak site of the insomnia ransomware group. The Virginia-based cosmetic and reconstructive practice, led by Dr. Jules Feledy, is claimed to have had internal files exfiltrated following a ransomware attack.

What's Publicly Reported from Reporting

Public reporting indicates that insomnia listed Belmont Plastic Surgery on its dark-web leak portal. The posting includes references to stolen internal documents, though the exact volume of data and the number of patients affected remain undisclosed. Available reporting describes the incident as a classic ransomware pattern: initial compromise, data exfiltration, and subsequent public shaming when the victim does not meet the group’s demands.

Internal files were taken. No confirmed evidence has surfaced yet showing that patient names, addresses, phone numbers, email addresses, dates of birth, insurance details, or clinical photographs were published. The practice specializes in breast augmentation, body contouring, and facial rejuvenation procedures, information that itself can be sensitive when paired with personal identifiers.

Why This Matters for You and Your Family

When a medical provider’s systems are breached, the information at risk often includes details you shared in confidence. Even if full patient records have not yet been dumped, the mere confirmation that files were taken creates immediate privacy and safety concerns. Criminal actors routinely comb medical leaks for Social Security numbers, addresses, and contact information that can be sold or used to impersonate patients.

Medical data carries lifelong consequences. A single exposure can lead to insurance fraud, prescription abuse, or blackmail attempts years later. For families, the breach can also affect spouses or children listed as emergency contacts or guarantors. The uncertainty itself is stressful: you do not know whether your information is already circulating on underground forums.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one dataset. Once internal files leave a clinic’s network, they frequently appear in secondary sales or are cross-referenced with other breaches. A phone number listed in a plastic-surgery patient file can be linked to social-media accounts, children’s gaming usernames, or school records. These connections form identity chains that let attackers build detailed profiles for doxxing, targeted phishing, or extortion.

Credential leaks from one service often cascade into account takeovers elsewhere. Gaming accounts belonging to you or your children are especially vulnerable because they frequently reuse email addresses or passwords tied to medical portals. A single exposed record can therefore endanger far more than your health information.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the no-subscription cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used on the Belmont Plastic Surgery patient portal anywhere else it is reused, and switch to 2FA through an authenticator app instead of text messages.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same address or contact details.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The insomnia group’s latest victim list is a reminder that medical practices remain high-value targets. Protecting your family requires more than hoping your doctor’s office eventually notifies you. Start by understanding exactly where your information surfaces online and close those exposure paths before criminals exploit them.

DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that links online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage also safeguards children’s gaming accounts that often become the next link in a doxxing chain after a credential leak like this one.