A threat actor is claiming to possess a 176 GB archive of sensitive patient records allegedly stolen from the practice of Houston orthopedic surgeon Dr. Jeffrey D. Reuben, with nearly 30,000 patient files reportedly being offered for sale on a cybercrime forum.
The listing, posted on June 21 by a forum user operating under the name iProfessor, alleges that 29,831 patient records were extracted during a breach that purportedly occurred in April 2026. The actor is seeking $5,000 for access to the data and claims distribution will be limited to five buyers.
BreachNews has not independently verified the authenticity of the data or confirmed that a breach occurred.
Extensive medical records allegedly included
According to the threat actor, the dataset contains a wide range of highly sensitive patient information, including personal identifiers, insurance records, medical documentation, and treatment-related files.
The alleged archive reportedly includes patient names, dates of birth, Social Security numbers, next-of-kin information, copies of identification documents, insurance records, physician notes, operative reports, radiology findings, rehabilitation records, financial consent forms, and other healthcare documentation.
If authentic, the exposure would represent a significant healthcare data breach due to the volume of protected health information and identity-related records allegedly involved.
The actor also claims the records include documentation relating to injured workers, veterans, and senior citizens receiving orthopedic care.
Claims extend to affiliated surgery center
The forum post further alleges that some records may be connected to patients associated with NW Surgery, a Houston outpatient surgical facility specializing in orthopedic, spine, sports medicine, and pain management procedures.
However, no evidence was publicly provided to independently verify the scope of any alleged impact on NW Surgery or determine whether the facility itself was directly compromised.
The threat actor additionally alleges that the affected organizations became aware of the incident in April but failed to notify patients. BreachNews has not independently verified those claims.
Healthcare sector remains a prime target
Healthcare organizations continue to be among the most frequently targeted sectors for data theft and extortion campaigns due to the high value of medical records on underground markets. Unlike payment card information, medical records often contain long-lasting personal, financial, and clinical details that can be leveraged for identity theft, insurance fraud, and other forms of abuse.
The alleged incident follows a series of healthcare-related security events reported by BreachNews, including the recently disclosed data theft incident affecting iRhythm, where patient information was exposed following unauthorized access to third-party applications.
At the time of publication, neither Dr. Reuben’s practice nor NW Surgery had issued any public statement regarding the alleged breach claims.
