Aesthetic Specialty Centre Ransomware Claim by Booba Project (Oct 2026)

Claim Summary

The Booba Project ransomware group has allegedly listed Aesthetic Specialty Centre, a healthcare organization based in Pakistan (domain www.asc-psd.com), on its dark web leak site. According to the threat actor, the attack was purportedly carried out on October 27, 2026, and the group claims to have stolen approximately 22GB of data it describes as “Medical Practices” records.

This claim has NOT been independently verified by Yazoul Security or any third party. It represents only the unsubstantiated assertion of the threat actor. Ransomware operators frequently publish inflated or fabricated claims to pressure victims into paying, and the mere presence of an organization on a leak site is not proof that a breach occurred or that the data described actually exists.

Threat Actor Profile

Booba Project is a relatively low-profile ransomware operation. At the time of writing, there is no public research available on this group, its total number of known victims is unknown, and its specific tooling has not been documented by independent security researchers. This lack of a verifiable track record is significant: it means we cannot assess the group’s historical accuracy, technical sophistication, or whether it consistently publishes genuine data.

Because no known tools or tactics have been publicly attributed to Booba Project, defenders should not rely on group-specific indicators. Instead, standard ransomware detection guidance applies, including monitoring for unusual data staging, mass file access, and anomalous outbound transfers. No YARA rules or dedicated detection signatures for this group are currently available in public sources. Organizations should lean on general behavioral detections and endpoint telemetry rather than actor-specific signatures.

Alleged Data Exposure

The group claims to have exfiltrated 22GB of data, which it characterizes as medical practice records. If genuine, healthcare data of this type could include patient information, appointment records, and potentially sensitive personal or clinical details. However, the volume and nature of the data remain unconfirmed. The threat actor has provided no verifiable sample, and Yazoul Security has not reviewed, validated, or reproduced any of the claimed material. We do not link to, host, or distribute leaked data, samples, or access instructions.

Potential Impact

If the claim is accurate, a healthcare data breach of this nature could carry serious consequences, including regulatory scrutiny under Pakistani data protection frameworks, reputational harm, and risk to patients whose information may be exposed. Healthcare records are among the most sensitive categories of data and are frequently targeted for fraud and extortion. That said, these impacts are contingent on the claim being true, which is currently unestablished. Victims of unverified claims sometimes face undue panic and secondary fraud attempts from scammers exploiting the publicity.

What to Watch For

• Official confirmation or denial from Aesthetic Specialty Centre.
• Regulatory notifications from Pakistani health or data protection authorities.
• Independent forensic reporting corroborating the breach.
• Signs of data being traded or resold on criminal forums, which would lend credibility to the claim.
• Phishing or extortion attempts referencing this incident, which may target patients regardless of whether the breach is real.

Disclaimer

This report is based solely on an unverified claim published by the Booba Project ransomware group on its leak site. Nothing in this article should be treated as confirmed fact. Yazoul Security has not independently verified the attack, the data volume, the data contents, or the group’s assertions. The organization has not been confirmed as a victim. Ransomware groups routinely exaggerate or fabricate claims to pressure targets. Readers should await official statements and independent forensic confirmation before drawing conclusions. For related threat intelligence, see our /intel/ section.