Skip to content
Ransomware

Ladue Family Dental targeted by Anubis ransomware group

The Anubis ransomware group has published data on its leak site, claiming it belongs to Ladue Family Dental.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Anubis
  • Country: United States
  • Sector: Healthcare
  • Announcement date: March 7, 2026

Anubis ransomware group claims data breach at Ladue Family Dental

The Anubis ransomware group has published a listing on its dedicated leak site, claiming that it has successfully targeted Ladue Family Dental. According to the announcement made on March 7, 2026, the threat actor group asserts that they have gained unauthorized access to the institution's systems and have obtained various documents and patient records. While the group has made these claims publicly, information regarding the specific capabilities and background of the Anubis group remains limited in the public domain.

Details of the claimed data theft

The threat actors have provided evidence to support their claims through the publication of screenshots. These images suggest that the stolen information is highly sensitive, encompassing both medical and administrative data. The leaked content reportedly includes a variety of files that could compromise the privacy of both patients and staff members. Specifically, the data identified in the leak includes:

  • Patient medical records
  • Dental X-rays
  • Employee tax forms
  • Financial records

The presence of such diverse data types suggests a broad compromise of the organization's digital environment. In many modern ransomware attacks, threat actors aim to extract as much sensitive information as possible to increase their leverage during negotiations.

About Ladue Family Dental

Ladue Family Dental is a dental clinic located in Ladue, Missouri. The institution provides a range of oral health services to its community, including general dentistry, cosmetic dentistry, and preventive oral health services. As a healthcare provider, the clinic handles a significant amount of sensitive personal and medical information, making it a high-value target for cybercriminals seeking to exploit private data.

Implications and potential risks of the leak

The publication of this data carries significant risks for the affected parties and the institution itself. For the patients, the exposure of medical records and dental X-rays represents a severe breach of privacy. Such incidents can lead to legal sanctions under HIPAA regulations, which govern the protection of sensitive patient health information. Furthermore, the inclusion of employee tax forms and payroll information significantly elevates the risk of identity theft and financial fraud for the clinic's staff.

From an operational standpoint, the institution may face substantial reputational damage and long-term disruptions to its daily operations. To manage the fallout of such a breach, organizations typically must conduct thorough forensic investigations to determine the exact scope of the data exfiltration and fulfill legal obligations to notify all affected individuals.

The tactics employed by the Anubis group in this instance may indicate a double-extortion strategy. In a double-extortion scenario, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release private data on a public leak site, the attackers aim to increase the pressure on the organization to pay the ransom, using the threat of public exposure and regulatory penalties as a primary motivator.

General defensive considerations for healthcare entities

Healthcare organizations are frequent targets due to the high value of medical records on the dark web. To mitigate the risks associated with ransomware and data exfiltration, it is common practice for institutions to implement robust security frameworks. This includes maintaining strict access controls, implementing multi-factor authentication, and ensuring regular, offline backups of critical data. Additionally, continuous monitoring of network traffic and employee training on phishing awareness are essential components of a proactive defense against the types of intrusions claimed by groups like Anubis.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories