Skip to content
Leak-site post naming Metro Tulsa Foot, captured by ThreatCluster

Metro Tulsa Foot

insomnia

Ransomware leak-site victim intelligence · EN

Posted
Aug 3, 2026
Country
United States
Industry
Hospitals & Physicians Clinics

Summary

Written by ThreatClusterfrom victim profile, leak post

No data types or quantities are specified in the leak regarding what, if anything, was taken from Metro Tulsa Foot. The leak describes Metro Tulsa Foot as a five-location foot and ankle treatment center in the Tulsa Metro area. The victim's domain is tulsafoot.com, listed in Hospitals & Physicians Clinics, USA; the leak is published on 2026-08-03.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Headquarters
Broken Arrow, Oklahoma, USA
Broken Arrow, Oklahoma, United States
Employees
0
Domains
www.tulsafoot.com

What was taken

A comprehensive foot and ankle treatment center with five locations in the Tulsa Metro area. They offer a range of services including treatment for common foot pains, deformities, and injuries, and provide same-day appointments for urgent needs.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Notified
2026-8-3
Download Data
http://r3keoxye5mki4fqcvlk4hpfqqzxmakchjpmem7oppynobcieamdbmcyd.onion/3a107838fffad4db/

Leak-site images (7)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Metro Tulsa Foot & Ankle Specialists" with a stylized design element.
onion leak page2.6 KB
Screenshot of a U.S. Income Tax Return form 1120-S for the year 2022, including various financial entries and signatures.
onion leak page269 KB
Document outlining the new medical records request process, including steps for transitioning to a new system and instructions for submitting paperwork.
onion leak page251 KB
Scan of an employee information record containing personal details such as name, address, emergency contact, and employment information.
onion leak page215 KB
Image of an Oklahoma driver license featuring a photo, personal details, and expiration date.
onion leak page382 KB
Screenshot of a table containing personal data, including names, identification numbers, email addresses, and locations.
onion leak page749 KB