Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Advanta Genetics LLC

aalabs.com

Group Aurora
Discovered 2026-04-29 21:37 UTC
Est. attack date 2026-04-17
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives — including highly sensitive chronic opioid therapy charts flagged by the Texas Medical Board and elderly Medicare audit records. Provider identities and prescribing power — SSNs, DEA numbers, and state licenses from 20+ states that can be turned into black-market "script pads". Gold-standard identity theft kits — W-2s, I-9s with passport scans, and full employee packages for 50+ staff. 102 complete QuickBooks company files exposing every vendor, payroll run, bank link, and financial secret across the Advanta/RedLeaf/OSPRI empire. High-value trade secrets — OSPRI Biopath investment decks, valuation models, FDA pre-submission packets, and the proprietary "The Brain" AI diagnostic architecture. Explosive privileged attorney-client memos on active regulatory battles (Texas Medical Board Remedial Plan #19-153 and a federal NORA subpoena). Active Directory domain controller data (NTDS.dit and SAM hives).

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 29

Third Party Employee Credentials: 0


External Attack Surface: 11


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • mp3xw84e7bknetworksolutionsprivateregistration.com
  • domain.operationsweb.com
MX Records
  • aalabs-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • apple-domain-verification=l5WbpO1ykvFYzES8
  • google-site-verification=gvnR1vEn5ia6UQuY06Ab8c9Jr_MVC7lS_CIljwlVP8k
  • v=spf1 a mx a:spf.ess.barracudanetworks.com a:kyloe.viviotech.us include:spf.protection.outlook.com ip4:209.222.82.0/24 ~all
Cloud / SaaS Services Detected
Apple

Leak Screenshot:

Leak Screenshot