Dermatology Associates listed on Anubis ransomware leak site

• Ransomware group: Anubis
• Country: United States
• Sector: Healthcare
• Announcement date: November 6, 2025

Anubis ransomware group claims attack on Dermatology Associates

The healthcare organization Dermatology Associates has been listed on the leak site of the Anubis ransomware group. On November 6, 2025, the group published an announcement claiming to have obtained data belonging to the organization. This incident follows a pattern often seen in modern cyberattacks where threat actors target sensitive sectors to maximize leverage during extortion attempts.

In such scenarios, ransomware groups frequently utilize leak sites to host announcements regarding their victims. These sites serve as a platform for the attackers to pressure organizations into paying ransoms by threatening to release stolen information to the public. This tactic is a core component of double extortion, where attackers not only encrypt an organization's systems but also steal sensitive data to use as additional blackmail material.

Details of the claim

The Anubis group's announcement, dated November 6, 2025, alleges that they have successfully compromised the clinic's data. Specifically, the group claims that customer data from the clinic has been compromised. Despite the gravity of these claims, the group has not provided any screenshots or evidence to substantiate the incident at this time.

The announcement states that clinic customer data has been leaked; however, the group has not provided a detailed list of the specific data types involved. Furthermore, no screenshots or additional evidence regarding the breach have been made available to the public by the attackers.

Organization profile

Dermatology Associates is a Florida-based healthcare provider offering medical and cosmetic dermatology services. They specialize in clinical care for skin health, diseases, and treatments.

Analysis and potential implications

This incident may indicate potential vulnerabilities in the organization's customer privacy and data security processes. If the alleged leaked data includes health records, it could trigger legal proceedings and administrative sanctions under HIPAA regulations. The potential exposure of sensitive medical information carries significant weight in the healthcare sector due to the highly regulated nature of patient privacy.

For individuals whose data may have been affected, there are significant risks to consider. These include the risk of identity theft or the possibility of being targeted by sophisticated phishing attacks. When personal or medical information is leaked, attackers often use it to craft highly convincing fraudulent communications to deceive victims.

From a regulatory standpoint, the organization may be required to fulfill data breach notification obligations and inform the affected parties. Organizations operating in the healthcare sector must maintain robust security postures to defend against such threats. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent security awareness training for staff to mitigate the risk of initial access through phishing.

Information regarding the Anubis group remains limited in the public domain, making it difficult to determine the full scope of their operations or specific methodologies. As with any reported breach, the situation remains based on the claims made by the threat actor on their leak site.