Raleigh Family Practice Data Breach: An Unconfirmed Ransomware Claim, No Lawsuit
Reference Guide
On October 2, 2026, a ransomware group listed Raleigh Family Practice on its leak site and claimed 1 GB of stolen data. As of October 15, 2026, the practice has not confirmed a breach, no patient notice or government filing could be found, and no lawsuit has been filed. What exists is a law-firm investigation looking for patients. If you are thinking of a different Raleigh practice with a confirmed breach this year, that is Family Medical Associates of Raleigh — a separate case explained below.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Reported
Raleigh Family Practice, P.A. is an independent, provider-owned family medicine practice in Raleigh, North Carolina, in operation since 1998 and not affiliated with UNC or any hospital system.
On October 2, 2026, the tracker Ransomware.live indexed a posting by a group calling itself Booba Project that names the practice’s website, rfppa.com (listed there as “Raleigh Family Medicine”), and claims 1 GB of stolen data. A second tracker, Breachsense, logged the same claim on October 5, 2026.
That is the whole public record. A leak-site post is the attacker’s own claim — the trackers only copy what criminals publish and do not verify it. No source names which records, if any, were taken.
Case details
No Raleigh Family Practice data breach lawsuit has been filed that we could find as of October 15, 2026. A search of federal court dockets on CourtListener for “Raleigh Family Practice” returned no cases, and our own federal docket database shows none either. North Carolina state-court filings (Wake County) are not searchable online, so a state filing cannot be ruled out entirely.
What does exist is a recruiting page published by plaintiffs’ attorneys on October 2, 2026, saying they are “looking into whether a class action lawsuit can be filed.” That is an investigation, not a case: there is no court, no case number and no judge.
Status: Claim Unconfirmed, No Case Filed
That can change. Medical practices often take weeks or months to investigate before mailing notices. If the practice confirms that patient information was taken, a formal notice to patients and a report to the HHS Office for Civil Rights would follow — and lawsuits typically come after that, not before.
Could You Be Affected?
If you are or were a patient of Raleigh Family Practice, you cannot know yet. No source has said whose data, or what kind, was in the 1 GB the group claims.
The practical test is your mail. If the practice confirms a breach, affected patients receive a written notice that names the data fields involved. Keep that letter and its envelope — it is your proof of being affected if a lawsuit or settlement ever follows.
If you were a patient of Family Medical Associates of Raleigh instead, see the section on that separate breach below.
Is There Any Money?
If a case is filed and later settles, small-practice health-data breaches usually resolve on documented losses plus a smaller flat payment. Our data breach settlement calculator shows how those structures work, and our O2 Dental Group page tracks another North Carolina healthcare practice where a ransomware group has claimed an attack.
The other Raleigh breach. Family Medical Associates of Raleigh, PA, a different practice, says an unauthorized actor accessed its systems between April 18 and April 20, 2026 and downloaded information. It discovered the activity on May 7, 2026, posted a notice on July 2, 2026, and the HHS breach portal lists 500 people affected. The exposed categories include Social Security numbers, medical history, lab results and insurance and Medicare or Medicaid IDs. We found no lawsuit there either.
Raleigh Practice Breaches: 2026 Timeline
April 18–20, 2026 — A Different Raleigh Practice Is Breached
An intruder accesses systems at Family Medical Associates of Raleigh and downloads information. This is not Raleigh Family Practice.
July 2, 2026 — That Breach Is Reported
Family Medical Associates of Raleigh posts its notice; the HHS breach portal records 500 affected people. The Genesis group had claimed the attack on June 3.
October 2, 2026 — Booba Project Names Raleigh Family Practice
Ransomware.live indexes a leak-site posting naming rfppa.com and claiming 1 GB of data. The practice has not confirmed it.
October 2, 2026 — Lawyers Start Recruiting
A plaintiffs’ investigation page goes up the same day, asking patients and staff to come forward. No lawsuit is filed.
October 5, 2026 — Second Tracker Logs the Claim
Breachsense lists the same claim, again 1 GB, again without any detail on what the data is.
October 15, 2026 — Still Unconfirmed
No notice on the practice’s website, no regulator filing found, no lawsuit, no settlement.
Three Things to Watch For
An unconfirmed breach with a law-firm ad attached is a gap scammers like to fill:
“Claim your Raleigh Family Practice settlement”
There is no settlement and no claims site. A page or text asking for your Social Security number or bank details to “secure your payment” is collecting data, not filing anything.
Callers who say they are from the practice
If stolen patient lists are real, they give criminals your name, doctor and phone number. Hang up and call the office back on the number from your own records or its official website before confirming anything.
“Pay to see if your data was leaked”
Nobody can sell you a look at what Booba Project took. Offers to search the dark web for a fee, or to “remove” your records from a leak site, cannot deliver what they promise.
Raleigh Family Practice Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Was there a Raleigh Family Practice data breach?
It is claimed, not confirmed. On October 2, 2026, the Booba Project ransomware group listed the practice on its leak site and claimed 1 GB of data. As of October 15, 2026, the practice has not posted a notice and we found no regulator filing.
Is there a Raleigh Family Practice data breach lawsuit?
Not that we could find as of October 15, 2026. Federal dockets show no case. Plaintiffs’ attorneys have published an investigation page asking patients to contact them, but an investigation is not a lawsuit.
What data was taken?
Unknown. The leak-site posting gives only a size (1 GB) and a sector. No source has listed the types of records. If the practice confirms a breach, its notice letter must say what was involved.
Is this the same as the Family Medical Associates of Raleigh breach?
No. Family Medical Associates of Raleigh is a separate practice. Its confirmed breach happened April 18–20, 2026 and affected 500 people per the HHS portal, and a different group, Genesis, claimed it. The Raleigh Family Practice claim came from Booba Project in October 2026.
How do I know if I was a victim of a data breach?
For a medical practice, the reliable signal is a notice letter or e-mail from the practice itself naming the data involved. A leak-site listing does not tell you whether your record was in it. Patients can also check the HHS Office for Civil Rights breach portal once a report is filed.
Are data breach settlements real?
Yes — many breach class actions end in court-approved settlements, which our open settlements list tracks. But a real settlement comes with a court-appointed administrator and a court order. For Raleigh Family Practice none of that exists as of October 2026.
What is the typical payout per person for a data breach settlement?
There is no figure for this case because there is no case. Across settlements, payouts depend on whether you can document losses, what data was exposed and how many people share the fund. Our calculator walks through those factors.
What is worth doing right now?
Freeze your credit at all three bureaus — free and reversible. Pull your free credit reports and read your insurer’s explanation-of-benefits statements for care you never received. Keep any letter the practice sends you.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay if one is ever reached
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Consequences of a Data BreachWhat exposed medical and identity data can be used for
- What Is a Civil LawsuitHow a case is filed and what happens before any payout