The American Board of Preventive Medicine Listed by genesis Ransomware Group

On May 8, 2026, the American Board of Preventive Medicine appeared on the leak site of the Genesis ransomware group. The organization, which certifies physicians in preventive medicine and related specialties, had internal files exfiltrated during a ransomware attack. Public reporting indicates that the number of individuals whose information was exposed remains unknown.

What's Publicly Reported from Reporting

The Genesis ransomware group posted proof of the breach on its dark-web leak site, as tracked by ransomware.live. Available reporting describes the incident as a classic ransomware operation in which the attackers gained access to the organization’s network, encrypted systems, and then exfiltrated files before demanding payment. The data taken consists of internal files; no public sample of the exact records has been released. The American Board of Preventive Medicine has not yet issued a formal public statement detailing the scope or the categories of personal information involved.

Why This Matters for You and Your Family

When a medical certification board is breached, the people affected are often doctors, current and former medical residents, public-health professionals, and the staff who support them. Many of these individuals have personal details—home addresses, phone numbers, Social Security numbers, licensure records, and family contact information—stored in certification databases. If your physician’s certification records or your own application data were held by the organization, that information may now be in the hands of criminals. For ordinary families this can mean sudden spikes in targeted phishing, identity-theft attempts, or even fraudulent medical claims filed in your name.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at encryption and ransom demands. Once internal files leave the victim’s network they frequently appear in underground markets where other criminals buy them to build detailed profiles. A single leaked email or phone number can be linked to your social-media accounts, your children’s school records, or your spouse’s workplace. These connections create what security analysts call an identity chain. One exposed credential can lead to account takeovers on email, banking, or healthcare portals. In this case the risk extends beyond the board-certified physicians themselves; family members listed as emergency contacts or dependents in employment or insurance files can also be pulled into the chain. Credential leaks like this one cascade into account takeovers and doxxing chains, which is why protecting both adult and children’s gaming accounts matters—many kids use the same email address or phone number tied to a parent’s professional records.

Genesis Ransomware Group Track Record

Public reporting attributes the Genesis ransomware group’s emergence to late 2023. The group has since listed hundreds of organizations across healthcare, education, manufacturing, and local government. Notable prior victims include mid-sized hospitals, insurance administrators, and professional associations. Their typical playbook begins with initial access gained through phishing, compromised remote-desktop credentials, or exploited vulnerabilities in internet-facing applications. After gaining a foothold they move laterally, exfiltrate sensitive files, deploy ransomware to encrypt systems, and then publish samples on their leak site if the victim refuses to pay. Extortion tactics often combine monetary demands with threats to release patient or employee data, increasing pressure on victims who must consider regulatory notification deadlines under HIPAA and state breach laws.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the no-subscription cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours rather than months.
• Rotate any password you used at the American Board of Preventive Medicine or related certification portals anywhere it has been reused, and switch on 2FA through an authenticator app instead of text messages.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and underground forums for you while you focus on securing your own accounts.

The incident is a reminder that even organizations we trust with professional credentials can become gateways to personal exposure. Taking concrete steps now limits how far criminals can travel down the identity chain that begins with this breach. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.