Benjamin H. Wang DDS Inc.
- Gruppe
- CRPxO
- Erfassungsdatum
- Status
- Online / unverändert
- Land
- Vereinigte Staaten
Hinweise zur Einordnung
Dieser Eintrag dokumentiert eine Veröffentlichung der Gruppe. Ein Angriff oder Datenabfluss ist damit nicht unabhängig bestätigt.
- Land: Prüfung älter als 30 Tage
Konfidenz ist eine heuristische Einschätzung. Prüfzeitpunkte beziehen sich auf die Anreicherung, nicht auf unabhängige Verifikation. Herkunft und Korrekturen finden Sie unter „Firmeninformationen & Datenherkunft“.
Angaben der Ransomware-Gruppe
UnbestätigtQuellentext als öffentliche Metadaten wiedergegeben. Die Aussagen wurden nicht unabhängig geprüft; Links sind ausgeblendet.
Benjamin H. Wang DDS Inc. is a dental practice located in Mountain View, California, operated by Dr. Benjamin H. Wang. The practice has failed to implement basic security measures to protect patient data.
We have successfully exfiltrated 1.2 GB of sensitive data from their primary workstation, including:
DATABASE & SYSTEM ACCESS
Raw SQL database dumps (transactions, recall lists, accounts receivable)
Full Eaglesoft database schema – allowing complete reconstruction of patient database
Dolphin Imaging configuration files with system paths
CareCredit financing configuration (potential API access)
PATIENT CLINICAL DATA
Surgical notes (implant procedures)
Panoramic X-rays and 3D imaging files
Root canal clinical records
Patient risk assessments and legal documents
Referral letters and scanned insurance ID cards
Treatment pre-determination requests
INSURANCE & FINANCIAL DATA
[Link entfernt] – raw claim data with patient insurance and billing details
Dental benefit summaries with insurance IDs and group numbers
Delta Dental and Blue Shield of California correspondence
Financial ledger ([Link entfernt]) – patient balances and charges
Scanned receipts and payment records
CALL RECORDINGS
Over 200 recorded phone calls (MP3 files) stored unencrypted
Violation of California wiretapping laws (CIPA)
This data is currently stored on our secure servers. Benjamin H. Wang DDS Inc. has been notified and given an opportunity to resolve this matter privately.
If no agreement is reached by the deadline, the data will be:
Published in full on our dark web leak site
Reported to the Office for Civil Rights (OCR) for HIPAA violations
Reported to the California Attorney General under CIPA for illegal call recording
Shared with all affected insurance carriers
The practice's use of a personal Yahoo email (bhwddsinc@yahoo.com) for business operations demonstrates the security culture of this establishment.
HIPAA violations identified:
164.312(e)(2)(ii): PHI stored in unsecured Downloads folder
164.310(d)(2)(iii): Raw SQL database access by non-administrative user
164.308(a)(1)(ii)(D): No auditing of PHI handling
California law violations:
CIPA (California Invasion of Privacy Act): 200+ unconsented call recordings
