'Editorial & naming policy'
Our job is to be accurate, calm and sourced. These rules govern how every record is labeled, named and written.
1. Status labels
Badges are independent and stack: Claim reported (posted on a leak site, unverified), Corroborated (confirmed by an independent outlet or the organization), Regulator filing located (HHS OCR or a state AG list) and Enforcement action (settlement, penalty or consent judgment). Disputed, withdrawn or corrected records are marked as such.
2. Naming rule
A single-office practice that appears only in a leak-site claim is shown as "Dental practice · [state]" until the claim is corroborated or filed with a regulator. DSOs, vendors, payers and filed records are shown by name.
3. Language
We write "listed by [group] on a leak site" or "reported to HHS". We do not write "was hacked" or "leaked patient data" unless a source establishes it. A filing does not imply negligence.
4. What we never publish
Links to leak sites, onion addresses or data samples; patient information of any kind; threat-group logos or imagery; ransom amounts presented as fact without a source.
5. Search visibility
Unverified claim records are marked noindex so they do not appear in search engines until corroborated.
6. Corrections
We acknowledge correction requests within 2 business days. Accepted changes are logged on the record with the date and reason. Withdrawn records leave a public note.