EdgeEndo® USA Listed by Booba Team Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
EdgeEndo® USA was listed by the Booba Team ransomware group on 02 October 2026, with the group claiming it holds data belonging to an undisclosed number of people. Individuals who may have interacted with the company should verify their exposure through official channels and consider protective steps such as monitoring accounts and changing passwords.
Ransomware crews continue to pressure organisations by posting names on leak sites before any independent verification, turning unconfirmed claims into public risk signals for customers and partners. In that climate, listings are best read as allegations that may be incomplete, recycled, or wrong until a company or regulator speaks.
On October 02, 2026, the group known as Booba Team listed EdgeEndo® USA on its leak site, describing the target in connection with the medical-device website www.edgeendo.com and claiming roughly 103 GB of data. EdgeEndo® USA has not publicly confirmed the claim as of writing. How many people, if any, are affected remains unknown, and the listing does not set out verified data categories. What follows separates the group’s claims from what is actually established.
Inside the listing
According to the listing, Booba Team names EdgeEndo® USA and ties the claim to www.edgeendo.com, characterising the organisation as related to medical devices. The group claims “stolen data” on the order of 103 GB. The public record supplied for this write-up does not name a method of intrusion, a duration of access, a ransom demand, or a schedule for any release of files.
People affected are recorded as unknown. Data types said to be exposed are not disclosed in the material available here. A leak-site entry of this kind is a statement by the claimant; it is not a confirmed inventory, a regulatory filing, or an admission by the named business. Timing beyond the reported listing date of October 02, 2026, is undisclosed. Readers should treat scale figures and slogans on such pages as the group’s marketing of its own claim, not as audited fact.
Inside Booba Team
Booba Team is known in open reporting as a ransomware and extortion-oriented actor that, like peer crews, seeks leverage by threatening to publish material it says it obtained and by listing victims on a dedicated leak site. Public descriptions of such groups typically include double-extortion patterns: encryption paired with data-theft claims, timed countdowns, and pressure on reputation as much as on systems recovery. Those patterns are general to the ecosystem; they are not independent proof that any particular file set from EdgeEndo® USA exists in the group’s hands.
For this incident, the only victim-specific assertions in the given facts are the listing itself, the website reference, and the claimed volume of about 103 GB. No further quotes, file samples, or technical indicators unique to this case are provided here. When Booba Team or similar actors list a name, the listing establishes that the group chose to make a public claim; it does not by itself establish lawful confirmation, full accuracy of the volume figure, or the sensitivity of whatever may or may not have been copied.
EdgeEndo® USA and its sector
EdgeEndo® USA is presented in the listing in the medical-device space, with a public web presence at www.edgeendo.com. Organisations in dental and endodontic device supply commonly sit at the intersection of clinical product information, distribution, and business relationships with practices and laboratories. That sector matters because even routine commercial systems can hold contact details, order history, shipping data, and credentials used by professionals who treat patients.
A leak-site claim against a named medical-device firm is consequential not because the claim is proven, but because patients, clinicians, and partners reasonably ask whether their information could be involved if the allegation were partly or wholly true. The listing does not prove operational failure at EdgeEndo® USA; it only places the company’s name in a public extortion theatre where unverified assertions travel quickly.
What data was at risk
The facts state that data types named as exposed are not disclosed. The group’s claim of about 103 GB is a volume assertion only; it does not itemise records. It is therefore not established which systems, if any, were involved, or whether personal, clinical, financial, or purely technical files are at issue.
If files from a firm in this sector were taken, organisations of this kind typically hold some mix of customer and practitioner contact data, account and order information, shipping and billing details, internal business documents, and credentials or configuration material tied to websites and support channels. That is a sector pattern, not a confirmed contents list for this listing. Exact contents remain unconfirmed, and no headcount of affected individuals is known from the material provided.
The real-world impact
For individuals and practices that deal with a medical-device supplier, the practical risk is conditional. If contact or account data were among material the group claims to hold, possible outcomes include targeted phishing that impersonates the company or a clinic, fraud attempts using familiar order or shipping details, and password reuse attacks where the same email and password appear elsewhere. If internal documents were involved, competitive or contractual sensitivity could matter to the business even when no consumer database is present. None of those outcomes is proven by the listing alone.
For the organisation, a public extortion listing can drive support load, partner questions, and reputational stress whether or not a regulator later validates a breach. Because people affected are unknown and data types are undisclosed, impact assessments must stay provisional. A listing establishes a claim and a claimed volume; it does not establish patient harm, confirmed exfiltration, or the accuracy of the 103 GB figure.
Steps worth taking either way
Until EdgeEndo® USA or an authoritative body confirms or denies the claim, cautious hygiene is still useful. Consider the following if you have an account, orders, or professional relationship tied to the firm or its site:
- Treat unexpected emails, texts, or calls that reference orders, invoices, or “breach assistance” as potential phishing until verified through a channel you already trust.
- If you reuse passwords on www.edgeendo.com or related portals, change them and enable multi-factor authentication where available.
- Monitor bank and card statements for unfamiliar charges if you ever stored payment methods with the company or related distributors.
- Be alert for social-engineering attempts that name EdgeEndo® USA, Booba Team, or “103 GB” as a pressure tactic.
- Prefer official company notices over screenshots from leak sites when deciding what personal steps to take.
These steps are prudent whether or not the Booba Team listing proves accurate. Readers can also run a free exposure scan of their email to check whether their information has already surfaced in known breach data sets unrelated to this claim. Public detail on this listing remains limited; the responsible posture is conditional vigilance, not assumption that any specific personal file is already in circulation.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
SourceLeak-site claim data adapted from RansomLook.io, used under CC BY 4.0.
More recent breaches
University of Illinois Chicago Listed by Booba Team Ransomware GroupSoni Medical Centre Listed by Booba Team Ransomware GroupRaleigh Family Medicine Listed by Booba Team Ransomware GroupAssociated Gastroenterologists Of Central New York, P.C Listed by Booba Team Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the EdgeEndo® USA Listed by Booba Team Ransomware Group →
Publicly posted by boobateam — unverified claim, pending independent verification. Leak-site claim data adapted from RansomLook.io, used under CC BY 4.0.
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.