Anonymous Intelligence Signal

GENESIS Ransomware Group Claims American Board of Preventive Medicine as Latest Victim

human The Lab unverified 2026-05-09 14:32:05 Source: Mastodon:mastodon.social:#ransomware

The American Board of Preventive Medicine (ABPM) has surfaced as a claimed victim of the GENESIS ransomware operation, according to dark web monitoring sources. The organization, which certifies physicians in preventive medicine specialties including aerospace medicine, occupational medicine, and public health, now faces potential exposure of sensitive professional and operational data. The claim emerged through OSINT channels tracking ransomware activity, with the incident linked to GENESIS infrastructure accessible via Tor hidden services.

Details surrounding the scope of the compromise remain limited at this stage. Ransomware groups routinely exfiltrate data before encryption, using the threat of publication to pressure victims into payment. For a medical certification board, the risk profile is particularly acute: physician records, examination materials, certification status data, and internal communications could all be in play. The ABPM has not yet issued a public statement regarding the incident, and the extent of any network intrusion or data theft remains unconfirmed by the organization itself.

The targeting of a preventive medicine certifying body underscores the breadth of ransomware operators' victim selection. Healthcare-adjacent institutions have become frequent targets, given their combination of sensitive data, operational urgency, and often limited cybersecurity resources. GENESIS has previously surfaced in threat intelligence reporting as an active ransomware operation leveraging dark web infrastructure for victim shaming and data leak threats. Security researchers and OSINT analysts continue to monitor the situation for signs of data publication or further claims. Organizations in the medical certification and healthcare sectors should treat this incident as a reminder to review backup integrity, incident response readiness, and third-party risk exposure.