Soni Medical Centre listed on Booba Project leak site

• Ransomware group: Booba Project
• Country: Canada
• Sector: Healthcare
• Announcement date: October 2, 2026

The threat actor group known as Booba Project has listed Soni Medical Centre on its dedicated leak site. The group claims to have successfully exfiltrated a significant amount of data belonging to the organization, marking a potential security incident for the healthcare provider.

The alleged data breach event

According to the announcement made on the Booba Project leak site on October 2, 2026, the group claims to have targeted Soni Medical Centre. The group asserts that they have gained access to the organization's systems and have stolen data as part of their operation. The timing of the claim suggests the attack may have occurred on the same day the announcement was posted, October 2, 2026.

In modern cyberattack methodologies, ransomware groups often employ a strategy known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also focus on exfiltrating sensitive information before the encryption phase. Once the data is stolen, the threat actors threaten to publish it on public leak sites to pressure the victim into paying a ransom. This method increases the leverage held by the attackers, as the threat of a public data leak can cause significant reputational and regulatory damage even if the organization can restore its systems from backups.

Despite the claim of a successful exfiltration, the Booba Project has not provided any detailed screenshots or concrete evidence to verify the contents of the data they claim to possess. The listing remains an unverified claim by the threat actor group.

Details regarding the claimed data

The information provided by the Booba Project regarding the stolen information is limited in scope. While the group has quantified the volume of the data, they have not provided specific details regarding the nature of the files. The listing names no specific data types or categories of information.

• Total claimed data size: 5.5 GB

The absence of specific file counts or detailed descriptions of the data contents means that the exact nature of the information—whether it consists of administrative files, internal communications, or sensitive records—remains unknown at this time. Furthermore, no screenshots have been provided by the group to substantiate their claims regarding the stolen files.

Organization profile

Soni Medical Centre is a healthcare provider located in Alberta, Canada. The organization primarily offers family medicine and various medical examination services to its patient population.

Impact and industry implications

The alleged leak poses significant risks, particularly regarding patient privacy, given that Soni Medical Centre operates within the healthcare sector. In Canada, the protection of personal health information is a mandatory requirement under the Personal Information Protection and Electronic Documents Act (PIPEDA). Consequently, an incident involving the exposure of medical data could lead to serious regulatory consequences for the organization.

If the leaked data is indeed authentic, it could be utilized by malicious actors for various secondary purposes, such as identity theft or highly targeted phishing attacks against the organization's staff or patients. Such attacks often use the stolen information to build trust, making the fraudulent communications appear legitimate to the recipient.

While information regarding the Booba Project group remains limited, the potential for secondary data exposures and long-term reputational damage is high if the breach is verified. For organizations in the healthcare sector, maintaining robust security postures is essential. Common defensive steps include implementing multi-factor authentication, maintaining strict access controls, conducting regular security awareness training, and ensuring comprehensive, offline backups are maintained to mitigate the impact of such incidents.