All About Potential Family Chiropractic

All About Potential Family Chiropractic operates as a chiropractic practice that focuses on providing care to individuals and families. The organisation offers spinal adjustments and related wellness services aimed at improving musculoskeletal health and overall well‑being. As part of its clinical operations, the practice collects and maintains detailed patient records that include personal identifiers, service dates, diagnoses, treatment explanations, and explanation of benefits statements. In addition to standard health information, the organisation also retains employment‑related documents and dietary records for its patients, reflecting a comprehensive approach to health documentation. The practice is headquartered in the United States, with the known incident indicating a location in South Dakota.

On February 5 2020, All About Potential Family Chiropractic experienced a cyberattack carried out by the Maze Team, which gained unauthorized access to its systems and exfiltrated sensitive data. The attackers publicly released sample files that exposed protected health information such as patients’ full names, service dates, diagnoses, treatment details, and explanation of benefits statements, alongside the employment‑related and dietary records stored by the practice. Notably, the threat actors incorrectly identified the victim as RamTek on their leak site, creating a discrepancy between the actual organisation and the name used in the public disclosure. At the time of the initial reporting, the practice had not issued any public statement regarding the breach, nor had it disclosed the potential number of affected records. No response was provided to inquiries seeking clarification about the scope or impact of the incident. This event underscores the vulnerability of healthcare providers to ransomware groups that target personal health data for extortion and public exposure.