Ransomware victim disclosure
← All victimsCapital Family Physicians
Claimed by cmdorganization · listed 5 days ago
Status timeline
- Listed
May 29, 2026
- Data leaked
At a glance
- Group
- cmdorganization
- Status
- Data leaked
- Country
- US
- Sector
- Healthcare
- Listed on leak site
- May 29, 2026
About the victim
AI dossier — public-source company profileCapital Family Physicians is a family medicine practice in Raleigh, NC offering comprehensive primary care for all ages, with particular emphasis on pediatric services. Established over 15 years ago, the practice provides same-day appointments and operates a patient portal for medical records and billing access.
- Industry
- Primary Care & Family Medicine
- Address
- 2417 Atrium Drive Suite 201, Raleigh, NC 27607
- Founded
- 2009
Attack summary
Severity: high — Healthcare provider with confirmed data disclosure (status: data_published); likely exfiltration of PHI including medical records and patient PII, which is regulated under HIPAA and represents sensitive personal health data at scale typical of a multi-provider practice.The cmdorganization group claims to have breached Capital Family Physicians but provides no details on the nature of the attack (encryption, exfiltration, or both) or specific data categories affected in the leak post.
Data the group says was taken
AI dossier — extracted from the leak post- patient medical records
- billing information
- personal health information (PHI)
What the group claims
Capital Family Physicians provides quality healthcare services for families, focusing on comprehensive care for all ages. They offer same-day appointments and a patient portal for convenient access to medical records and billing. The practice emphasizes pediatric services, ensuring that children's health is prioritized. With over 15 years of experience, they are dedicated to supporting patients through every stage of life.
Sources
- Victim sitewww.capitalfamilymd.com
Source
Indexed 5 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
