Skip to content
Ransomware

Booba Project ransomware group lists EdgeEndo® USA on its leak site

The threat actor group known as Booba Project has listed EdgeEndo® USA on its leak site, alleging the theft of 103 GB of data.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Booba Project
  • Country: United States
  • Sector: Healthcare
  • Announcement date: October 2, 2026

Booba Project claims data breach against EdgeEndo USA

The threat actor group known as Booba Project has listed EdgeEndo USA on its leak site, alleging the theft of a significant amount of data. According to the announcement made on October 2, 2026, the group claims to have compromised the organization's network, leading to a purported data breach. This type of activity is characteristic of modern ransomware operations, where attackers often employ double extortion tactics. In such scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive information to pressure the victim into paying a ransom by threatening to leak the data publicly.

The announcement was made on the group's dedicated leak site, a platform used by various ransomware collectives to host stolen data and shame organizations that refuse to meet their demands. While the listing confirms the group's intent to publicize the incident, the specific motivations or the exact nature of the group's operations remain unclear due to the limited information available regarding Booba Project.

Details of the alleged incident

The Booba Project has claimed that the breach occurred on October 2, 2026. According to the group's announcement, the attackers managed to obtain 103 GB of data from the organization's network. This volume of data suggests a substantial intrusion into the corporate environment. However, despite the significant size of the claimed data, the group has not provided a detailed list or any screenshots regarding the specific content of the leaked files. This lack of transparency is common in the early stages of a leak, as groups may use the threat of disclosure to initiate negotiations.

At this stage, the listing names no specific data types that have been compromised. Without a verified inventory of the stolen files, the exact scope of the information loss remains unknown. The absence of a ransom demand in the public announcement also leaves the group's immediate objectives unconfirmed.

About EdgeEndo USA

EdgeEndo USA is an American medical device company that manufactures and supplies endodontic instruments and equipment for dentists. The organization specializes in the production of rotary files and other dental materials specifically used in root canal procedures. As a provider of specialized medical tools, the company operates within the critical healthcare sector, supporting dental professionals with necessary surgical and procedural instruments.

Potential risks and industry implications

This alleged data breach may pose a risk of exposure for patient or employee data held by EdgeEndo USA. As a US-based healthcare entity, any potential data loss could lead to legal repercussions and compliance processes under HIPAA regulations. The Health Insurance Portability and Accountability Act (HIPAA) mandates strict protections for sensitive patient health information, and failures in data security can result in significant regulatory scrutiny and penalties.

Until the nature of the compromised data is clarified, secondary risks such as identity theft or targeted phishing attacks may emerge for the organization's clients and employees. When sensitive information is leaked, it can be used by other malicious actors to conduct highly convincing social engineering campaigns or to commit financial fraud.

For organizations operating in the healthcare and medical device sectors, maintaining robust cybersecurity postures is essential. Common defensive steps include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular network segmentation to prevent lateral movement by attackers. Furthermore, continuous monitoring and comprehensive incident response plans are vital to mitigate the impact of such breaches and to ensure compliance with industry-specific legal requirements.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories