King Family Medical Ransomware Claim by Booba Project (Oct 2026)

Claim Summary

On or around October 27, 2026, the ransomware group known as Booba Project allegedly listed KING FAMILY MEDICAL, a US-based healthcare organization operating at www.kingfamilymedical.net, on its dark web leak site. According to the threat actor, the group claims to have exfiltrated approximately 67 GB of data, which it describes as “Hospitals and Health Care Stolen data.”

This claim has NOT been independently verified. No sample files, proof-of-compromise artifacts, or corroborating evidence have been reviewed by Yazoul Security at the time of writing. The organization has not publicly confirmed the incident, and the timeline, scope, and authenticity of the alleged data theft remain unconfirmed.

Threat Actor Profile

Booba Project is a relatively low-profile ransomware operation. Based on currently available intelligence, the group’s total number of known victims is unknown, and there is no public research documenting its tooling, infrastructure, or affiliate structure. Its known tools and tactics are, at present, undocumented in open-source reporting.

This lack of a verifiable track record is significant. Groups with little or no established history are harder to assess for credibility, and their claims should be treated with heightened skepticism. Some emerging or rebranded operations exaggerate data volumes or victim significance to manufacture pressure and reputation. Without prior confirmed victims, tooling signatures, or leaked samples tied to this actor, analysts cannot confidently attribute capability or intent. No YARA rules or detection guidance specific to Booba Project are publicly available at this time; defenders should rely on general ransomware detection hygiene rather than actor-specific signatures.

Alleged Data Exposure

The threat actor purportedly claims to hold 67 GB of data described generically as healthcare-related. Notably, the listing provides no detail on data categories, record counts, or affected systems. For a healthcare victim, plausible data types could include patient records, billing information, or internal operational files, but this is speculation only. Yazoul Security has not seen, and will not distribute, any data samples, credentials, or download references associated with this claim.

Potential Impact

If the claim is accurate, a healthcare breach of this nature could implicate protected health information and trigger regulatory obligations under HIPAA, alongside reputational and operational harm. However, because the claim is unverified and the data description is vague, the actual scope may be far smaller than asserted. Ransomware groups routinely inflate figures. Organizations in the healthcare sector should treat this as a prompt for internal review rather than a confirmed event.

What to Watch For

• Official statements from King Family Medical confirming or denying an incident.
• Regulatory filings or breach notifications that would corroborate the claim.
• Appearance of healthcare data attributed to this actor in criminal marketplaces (monitor only, do not engage).
• Any future confirmed victims that would help establish Booba Project’s credibility and tactics.

Disclaimer

This report is based solely on an unverified claim published on a ransomware leak site. Nothing herein is confirmed as fact. The allegations are attributed to the threat actor and have NOT been independently verified by Yazoul Security. Ransomware groups frequently exaggerate or fabricate claims to pressure victims. Readers should await official confirmation before drawing conclusions. For related monitoring, see our intel and advisory sections.