This file has been downloaded from The Seven Deadly Sins Data Leak Site (DLS).

Victim: CureMetrix, Inc. (curemetrix.com)
Retrieved: 2026-09-21 · FDA mammography AI · HIPAA-covered PHI

Status: Listed · 72h to contact · deadline 2026-09-24T17:00:00Z · not yet notified

Entry: exposed Metabase BI at https://reports.curemetrix.com (v0.59.5.1)
Connected warehouses: Mammo DB (MySQL), cmCloud (Redshift), Snowflake CM Support

CRITICAL PHI (verified live via Metabase native SQL):
  - patient ............................ 576,823 rows (MRN, patient_name, DOB, genetics, ethnicity, family_history)
  - clinical_study ..................... 504,630 rows
  - mammo_clinical_data ................ 73,053 rows
  - view_bounding_box_stack ............ 2,543 rows

EXPORT BUNDLE (~1.5 GB local · staged for publication):
  - public.dicom ....................... ~1,044,055 rows (DICOM UIDs, tags, org/client)
  - aws_s3 ............................. ~507,000 rows (S3 bucket/key + MRN + accession + SOP UID)
  - clinical_info_to_study ............. ~488,278 rows
  - clinical_data_to_study ............. ~124,049 rows
  - image_tally / image_tally_complete . ~597K+ imaging study rollups (MRN, BI-RADS, patient_name)
  - public.client_report* .............. ~240K+ customer BAC / mammography reports (prod/staging/dev)
  - biopsy ............................. ~30,399 rows (pathology, cancer flags, patient_id_fk)
  - ground_truth ....................... ~35,752 annotation rows
  - data_split, annotation, bounding_box, client tables (partial / sample on large Redshift views)

Metabase application exports: users, dashboards, database metadata (161 users, 81 dashboards)

Full archive after deadline: shouldve-paid-the-fucking-ransom-curemetrix-7ds.7z (~1.5G)

Proof sample: curemetrix_proof_7ds.txt
Negotiation email template: EMAIL.txt

These files will be published if the victim does not pay a ransom or cooperate
with The Seven Deadly Sins group.

The Seven Deadly Sins