Dark Web Listings Now Selling 47,684 Neurologist Records From AAN

HEROIC tracked 47,684 records from the American Academy of Neurology surfacing on dark web channels on March 2, 2025, exposing email addresses, first names, and last names of physicians, researchers, and trainees registered with the world's largest neurology professional body at aan.com. The dataset is now circulating on credential brokers' shop fronts and forum threads tagged for medical targeting.

Why This American Academy of Neurology Database Breach Is Dangerous

Doctors are high-value targets. A leaked AAN member list gives attackers a verified roster of practicing neurologists, complete with names and the exact email each one trusts for professional correspondence. That makes phishing for hospital VPNs, electronic health record logins, or grant funding nearly indistinguishable from real AAN outreach.

What Was Exposed in American Academy of Neurology

• 47,684 American Academy of Neurology member records
• Email addresses tied to physicians and neuroscience professionals
• First and last names of clinicians and researchers
• Membership context that confirms each contact is a verified specialist

Why This Matters

Healthcare phishing is the precursor to ransomware in countless hospital incidents. With AAN names and emails in hand, attackers can spoof CME registrations, fake journal review requests, or impersonate the academy itself to slip credential-stealing links past busy clinicians. A single compromised neurologist can become the foothold inside a major hospital network.

How a Healthcare Database Breach Like This Works

Professional association portals run on aging membership platforms with extensive integrations for events, publications, and CME tracking. Attackers commonly exploit weak admin authentication, unpatched plugins, or vulnerable APIs to extract member tables. The AAN dump structure points to a direct database export, consistent with a focused exfiltration aimed specifically at the member roster.

Check If You Are Affected

If you are an AAN member, a fellow, or a partner organization on the academy's mailing list, search HEROIC's 400B+ record breach database for your professional email. A confirmed match means you should rotate any reused passwords, brief your IT team, and treat any unexpected AAN-branded message with extra suspicion.