companion allegedly hacked as reported by Everest ransomware with details: Leak of L&P Aesthetics / L&P Aesthetics Medical, Inc. The dataset contains both internal corporate materials and data related to patients, prospective clients, employees, and counterparties. The number size of the identified dataset is 117 GB, comprising 25,373 files and several 1000 folders. The materials also include email archives and exported CSV files associated with the destination . The dataset contains the following categories of data: 1. Patient and prospective node data: * first and last names; * phone numbers; * email addresses; * IP addresses; * cities / inquiry locations; * referral sources, such as Google, Instagram, and web leads; * client text messages describing desired procedures; * services of interest, including Botox, fillers, laser / peel resurfacing, facials, VISIA skin analysis, and other aesthetic procedures. 2. Medical and health-related information: * dates of birth, age, and gender; * medical histories and intake forms; * info regarding allergies, medications, and current skincare routines; * exam and audience notes; * treatment plans and procedure notes; * Botox / filler notes, injectable maps, units, and treatment areas; * VISIA facial assessment reports; * dermatology / pathology requisition forms; * prescription-related records and patient portal information; * documents related to facial plastic surgery, MedSpa services, laser treatments, skincare, and other procedures. 3. Patient photographs and visual materials: * facial photographs of patients; * before-and-after images or photographs related to treatment and consultations; * photographs sent by patients via email for consultations or followup purposes. 4. Financial and billing data: * invoices and receipts; * quotes / cosmetic surgery estimates; * information regarding procedures, prices, discounts, payments, and outstanding balances; * references to ACH / citation card payments; * billing-related correspondence. 5. Email data and correspondence: * expectation PST archive for ~ 26.8 GB; * sent items - more than 59 g letters to customers; * conversation history; * consultation enquiry emails - more than 8 g requests; * agreement with patients, leads, vendors, and employees; * email attachments, including forms, photographs, invoices, and operational documents. 6. credentials and access data: * spreadsheets containing logins and passwords; * access data for internal and external services; * patient portal / vendor portal references; * alarm / lockbox / access codes; * Wi-Fi / internal system credentials; * documents related to Microsoft 365 / Google Workspace migration. 7. Internal corporate documents: * SOPs and operational instructions; * opening / closing procedures; * employee handbook and hr policies; * schedules and staff-related documents; * employee benefit policies; * training and onboarding materials; * marketing resources, logos, consent forms, and photo consent records. 8. Facility, security, and construction documents: * floor plans; * permits; * as-built drawings; * HVAC, plumbing, electrical, fire safety, and signage documents; * dismay procedures; * emergency protocols; * access contain materials; * vendor maintenance records and warranty documents. 9. Counterparty documents and data: * vendor communications; * enjoin forms; * pharmacy / lab / pathology portal references; * documents related to Skinbetter, myAnazao, Labcorp / UCSF pathology, Microsoft 365 migration, and other third-party services. Some of the identified materials represent personal information, medical information, protected health information, confidential business information, and access credentials. The most sensitive materials appear to include patient records, facial photographs, clinical notes, invoices, prescription / pathology-related materials, and files containing logins and passwords.