The American Board of Preventive Medicine Listed by genesis Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The American Board of Preventive Medicine was listed by the genesis ransomware group on May 09, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of individuals may have been affected; anyone connected to the organization should check for notifications and review their accounts.
Breaking down the breach
The only confirmed detail is the May 09, 2026 listing itself. The genesis group claims to have obtained internal files from the organization. No information has been released on the number of records involved, the method of initial access, or whether any data was subsequently published. Public reporting on the incident remains limited to the existence of the listing.
The group behind it: genesis
Genesis is a ransomware group that has conducted operations against organizations in multiple sectors. Its typical approach involves encrypting systems and then listing victims on a leak site to pressure payment. The group has appeared in prior incidents involving healthcare and professional-service entities. In this case the listing constitutes an unverified claim by the group; the organization has not issued a statement confirming or denying the events described.
Who is The American Board of Preventive Medicine?
The American Board of Preventive Medicine certifies physicians in the specialty of preventive medicine. Organizations of this type maintain records related to certification applications, examination results, continuing-education documentation, and professional contact information. A breach at such an entity can affect both the physicians it serves and any administrative or patient-related data the board holds in the course of its operations.
The information in question
The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific data fields has been published. Organizations that handle medical specialty certification commonly store names, addresses, license numbers, examination scores, and payment details. Whether any of these categories were among the files referenced remains unconfirmed.
What's at stake
Individuals whose records appear in certification files could face risks of identity misuse or targeted fraud if personal identifiers were included. The organization itself may encounter operational disruption, regulatory scrutiny, and costs associated with investigation and remediation. Because the exact contents and volume of data remain undisclosed, the practical impact on any single person cannot yet be quantified.
Were you affected?
Begin by contacting The American Board of Preventive Medicine directly for any notifications it may issue. Monitor financial accounts and credit reports for unusual activity. Consider placing a credit freeze if personal identifiers are known to be held by the board. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.
- Request written confirmation from the organization about the scope of any exposure.
- Review statements from banks and insurers for unauthorized activity over the next several months.
- Keep records of all correspondence with the board and with credit agencies.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Community Health Action of Staten Island (A part of Sun River Health) Listed by genesis Ransomware GroupConsolidated Medical Practices of Memphis Listed by genesis Ransomware GroupEast Texas Family Medicine Listed by genesis Ransomware GroupMirage Endoscopy Center Listed by genesis Ransomware GroupLatest breaches
Publicly posted by genesis — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.