Associated Gastroenterologists Of Central New York, P.C Listed by Booba Project Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

A ransomware group has publicly named Associated Gastroenterologists Of Central New York, P.C. on its leak site, claiming it holds data tied to the practice. For patients, staff, and anyone who has shared personal or medical information with a gastroenterology clinic, that kind of listing raises practical questions: whether records might appear online, how identity or insurance details could be misused if the claim is real, and what steps are worth taking while the situation remains unverified. As of writing, the practice has not publicly confirmed the claim.

Public detail is limited. The listing is an accusation from the group known as Booba Project, not a finding by a regulator or an admission by the organization. Scale, method, and exactly whose information might be involved are not independently established. What follows separates the claim from background on the actor and the sector, and keeps advice conditional.

What is being claimed

According to material associated with the Booba Project leak site, Associated Gastroenterologists Of Central New York, P.C. has been listed, with a reported date of October 01, 2026. The group’s reported summary describes the matter in terms of medical practices and states “Stolen data: 70 GB.” The number of people affected is unknown in the available record. Data types named as exposed are not disclosed beyond that high-level framing.

No confirmed technical account of how any intrusion would have occurred, when it would have begun, or whether files were actually copied has been provided in the facts at hand. Leak-site posts are pressure tools: groups often assert possession of archives and threaten publication to force payment. Until the organization, a regulator, or another independent source corroborates events, the listing should be read as Booba Project’s claim, not as settled fact. The company has not publicly confirmed the claim as of writing.

Inside Booba Project

Booba Project is known in public reporting as a ransomware and extortion-style actor that operates by encrypting systems or exfiltrating data—or both—and then listing victims on a leak site to amplify pressure. Like other groups in this category, it typically advertises stolen volume, deadlines, and sample files as marketing for the threat of dump or auction. Public coverage of such crews often notes recycled or inflated claims, partial archives from older incidents, and listings that never produce a full release.

For this specific organization, the only incident-specific assertion in the given record is the leak-site listing and the “70 GB” medical-practices framing. No further quotes, file inventories, or method details from Booba Project about this victim are supplied here. Readers should treat “the group claims” as the accurate framing: a leak-site entry establishes that a crew chose to name a target; it does not by itself prove what was taken, whether the volume figure is accurate, or whether publication will follow.

Who is Associated Gastroenterologists Of Central New York, P.C?

Associated Gastroenterologists Of Central New York, P.C. is a medical practice focused on gastroenterology—care involving the digestive system, related diagnostics, and ongoing treatment. Practices of this kind sit at the intersection of clinical care and regulated health information. They typically schedule patients, document visits, order and receive lab and imaging results, bill insurers, and maintain charts that can include identifiers, histories, medications, and contact details.

A claimed incident involving a specialty medical group matters because health-related records are long-lived and hard to “reset.” Unlike a single password, clinical and billing context can support targeted fraud, insurance misuse, or highly personal exposure if it ever becomes public. That consequence is about the sensitivity of the sector’s ordinary data holdings, not about any proven event at this practice. The leak-site claim is consequential precisely because people reasonably assume clinics hold more than bare contact lists—and because patients often cannot easily change the underlying medical facts those systems store.

What was likely exposed

The facts do not name specific data types as exposed; that detail is not disclosed. Booba Project’s listing refers to medical practices and a claimed 70 GB of data, but a volume figure on a leak site is the attacker’s marketing, not an audited inventory. It is not established what folders, systems, or years of records—if any—would be involved.

If files from a gastroenterology practice were taken, organizations in this sector typically hold combinations of patient demographics, appointment and referral information, clinical notes, procedure and diagnosis coding, insurance and billing records, and sometimes staff or vendor contact data. Those categories are typical for the industry; they are not a confirmed description of this listing. Exact contents remain unconfirmed. Any discussion of risk should stay conditional: if material of that kind were in an archive the group claims to hold, the sensitivity would stem from health and identity data combined, not from the mere fact of a name on a leak site.

The real-world impact

For individuals, the realistic worries—if the claim were accurate and if personal records were included—include phishing that references real appointments or conditions, attempts to open credit or medical identity accounts, fraudulent insurance claims, and distress from private health details circulating. People affected counts are unknown, so there is no public basis to say how wide any impact would be. Many leak-site claims never result in a full public dump; others release partial sets. Uncertainty itself is part of the harm: patients may not know whether to monitor, freeze credit, or wait for official notice.

For the organization, a public extortion listing can mean reputational strain, patient inquiries, possible regulatory attention if a reportable breach is later established, and operational cost even when claims are disputed. None of that proves negligence or confirms theft; it describes what leak-site pressure is designed to create. A listing does not establish security failures, detection gaps, or culture. It establishes that a named crew asserted possession of data and attached a size claim. Separating accusation from proof is the responsible reading for patients and the public.

What to do now

If you are a patient or employee and you are concerned that your information might be involved, treat the situation as conditional. Watch for official notices from the practice or from regulators. Be skeptical of unexpected messages that cite this listing and ask for passwords, payments, or full Social Security numbers. If you use the same email or password on medical portals and other sites, change those passwords and enable multi-factor authentication where available. Consider credit monitoring or a fraud alert if you later learn that identifiers such as Social Security numbers or insurance IDs were involved—something not established in the current public detail.

Keep copies of any formal breach notification you receive. Report suspected medical identity theft to your insurer and, in the United States, consider resources from the Federal Trade Commission if misuse appears. You can also run a free exposure scan of your email to check whether your address has already appeared in known breach datasets unrelated or related to past incidents—useful hygiene while this particular claim remains unverified. Public detail on this listing is thin; calm, conditional steps are more useful than assuming your records are already public.

AICompiled with AI assistance from public sources and published under our editorial standards.