Summary
Written by ThreatClusterfrom victim profile, leak postThe leak claims to have exfiltrated patient records from Andrews Advisory Group LLC, a US financial advisory and restructuring firm, including a December 2025 backup containing 3,698 records with names and dates of birth, taken from the office network. The group states the release also includes the complete patient database backup history (2018–2025), more than 13,000 patient eye examination records with full ocular, medical and social histories, OCT eye scan files, and workstation profiles with stored system credentials. The leak post is listed.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Headquarters
- Chicago, Illinois, USA
Chicago, Illinois, USA
What was taken
Patient records with names and dates of birth from the patient database backup of December 2025 (3,698 records), taken from the office network The complete patient database backup history, 2018 through 2025 More than 13,000 patient eye examination records with full ocular, medical and social history OCT eye scan files from the imaging server on the network Workstation profiles of office staff including stored system credentials
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.