The Gentlemen closed the week with a healthcare-heavy run on its leak site, threading a patient monitoring equipment supplier, a dental consulting firm, and three individual practices into one batch alongside an Abu Dhabi drone maker.
The most consequential name is Shared Medical Technology, a Schenectady, New York firm that rents ventilators, patient monitors, infusion pumps, ultrasound units, portable X-ray machines, and bariatric beds to hospitals and surgery centers across three states. Its customer list per the crew’s writeup includes Albany Medical Center, Saratoga Surgery Center, and Brooklyn Surgery Center.
The rest of the healthcare entries are small operators: First Dental Health, a Sacramento dental practice consultancy; Santa Barbara Endodontics, a solo specialty practice running since 1987; and Newport Beach Dentistry, a family practice in Orange County. A dental and med spa clinic in Ciudad Juarez rounded out the batch.
Equipment suppliers are the interesting target
Rental firms for patient monitoring hardware hold inventory and logistics records rather than patient charts, which makes them look low risk under naive triage. But they also hold deployment schedules showing which hospital has which device and when it moves, plus service contracts and delivery routes. That is operational intelligence about surge capacity.
For dental practices the calculus differs. These are lean operations, often without a dedicated security function, where one compromised mailbox can carry years of treatment records, insurance details, and payment data.
What a listing means
None of these organizations has confirmed an intrusion, and no sample files had been published at publication time. The Gentlemen have become one of the more persistent healthcare extortion operations of the year, mixing leak-site posts with voice phishing that talks help desk staff out of multi-factor codes.
Named practices should review identity provider logs, rotate remote access credentials, and brief front-desk staff on call verification.
