The Foot Doctor's listed on Space Bears ransomware leak site

• Ransomware group: Space Bears
• Country: United States
• Sector: Healthcare
• Announcement date: November 14, 2025

Space Bears claims data theft from The Foot Doctor's

The healthcare provider The Foot Doctor's has been listed on the leak site operated by the ransomware group known as Space Bears. According to the announcement posted on the group's platform on November 14, 2025, the threat actors claim to have successfully obtained data belonging to the organization.

The Space Bears group alleges that the cyberattack occurred on November 13, 2025. While the group has published this claim on their leak site, the specific details regarding the volume of data or the exact nature of the technical intrusion remain unspecified in the public announcement. The group's listing focuses on the fact that they have gained access to the organization's internal information, marking a potential data exfiltration incident.

Compromised information and affected parties

The announcement provided by the Space Bears group specifies that the compromised data includes sensitive information. According to the group's claims, the breach involves personal information belonging to both the organization's employees and its clients. In addition to these personal details, the group indicates that various other documents have been included in the stolen dataset.

The specific categories of data identified in the claim include:

• Employee personal data
• Client personal data

No specific file counts or the total size of the data exfiltrated have been provided by the group at this time.

About The Foot Doctor's

The Foot Doctor is a podiatry clinic located in Casper, Wyoming. Founded by Dr. Michael P. Wilkinson, the clinic specializes in a variety of medical services focused on foot and ankle health. Their medical offerings include specialized foot and ankle surgery, the provision of custom orthotics, and dedicated diabetic foot care services for their patient population.

Implications and industry context

This incident highlights the significant risks associated with data exfiltration-focused ransomware attacks. The Space Bears group appears to utilize a strategy that emphasizes the release of stolen data to exert pressure, a method that can lead to severe reputational damage and a breach of patient privacy rights. For a healthcare provider, such a leak poses secondary risks to the individuals involved, including the potential for identity theft and various forms of fraud targeting both patients and staff.

Because the organization operates within the United States healthcare sector, this incident may trigger legal proceedings and regulatory scrutiny under HIPAA regulations. Organizations in this sector are often held to high standards regarding the protection of sensitive medical and personal information, and a breach of this nature typically requires the fulfillment of specific data breach notification obligations to inform all affected parties.

While the technical proficiency of the Space Bears group remains a subject of uncertainty, the sensitive nature of the data allegedly stolen increases the overall severity of the situation. In general, organizations facing such threats often focus on defensive measures such as robust encryption, multi-factor authentication, and rigorous access controls to mitigate the impact of unauthorized access to sensitive personal and medical records.