The covered entity (CE), Sonrisas Dental Health, reported that it was the target of a cyberattack that compromised the protected health information (PHI) of 15,644 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring…
Threat actors · /threat-actors
Threat actors
Groups that have listed US dental organizations on leak sites, with each claim tied to its record and public sources. Listed alphabetically, not ranked.
Attribution is a claim, not a finding.A group posting an organization's name on a leak site does not prove it was responsible, or
that data was taken. DDSBreach has not verified these claims, and the organizations may
dispute them. We never link to leak sites, onion addresses or samples.
71Groups with dental recordsLast 5 years · DDSBreach records
192Dental records with a named groupClaims and attributions, last 5 years
12Groups with a law-enforcement actionTakedowns, sanctions or CISA/FBI advisories
GroupClaims
3AM 2 Active in dental data 2025-20258Base 3 Active in dental data 2023-2025Abyss 1 Active in dental data 2023-2023abyss-data 1 Active in dental data 2023-2023Akira 7 Active in dental data 2025-2026alphalocker 3 Active in dental data 2025-2025ALPHV/BlackCat 7 Active in dental data 2022-2024Anubis 2 Active in dental data 2026-2026Barracuda 2 Active in dental data 2026-2026Beast 4 Active in dental data 2025-2026BianLian 6 Active in dental data 2022-2025blackbyte 1 Active in dental data 2021-2021blackshrantac 1 Active in dental data 2026-2026BrainCipher 1 Active in dental data 2024-2024bravox 1 Active in dental data 2026-2026Chaos 2 Active in dental data 2026-2026ciphbit 1 Active in dental data 2024-2024Cl0p 3 Active in dental data 2023-2023clop torrents 1 Active in dental data 2023-2023coinbasecartel 1 Active in dental data 2026-2026CRPxO 7 Active in dental data 2026-2026Dark Project 1 Active in dental data 2026-2026DireWolf 1 Active in dental data 2026-2026dispossessor 3 Active in dental data 2020-2024DragonForce 2 Active in dental data 2025-2025emperador 1 Active in dental data 2026-2026Everest 7 Active in dental data 2023-2026genesis 1 Active in dental data 2026-2026Global Secret Group 1 Active in dental data 2026-2026gunra 1 Active in dental data 2026-2026helldown 1 Active in dental data 2024-2024Hive 1 Active in dental data 2022-2022Hunters International 1 Active in dental data 2024-2024Hyflock 1 Active in dental data 2026-2026INC Ransom 8 Active in dental data 2025-2026Interlock 4 Active in dental data 2025-2026kazu 1 Active in dental data 2025-2025knight 2 Active in dental data 2023-2023lamashtu 2 Active in dental data 2026-2026LockBit 9 Active in dental data 2021-2026lv 2 Active in dental data 2022-2022Lynx 2 Active in dental data 2026-2026mad liberator 1 Active in dental data 2024-2024Medusa 4 Active in dental data 2023-2025money message 1 Active in dental data 2023-2023Monti 2 Active in dental data 2023-2024mydata 3 Active in dental data 2025-2025NightSpire 4 Active in dental data 2024-2026Nitrogen 1 Active in dental data 2026-2026noescape 1 Active in dental data 2023-2023obscura 3 Active in dental data 2025-2025Orova 2 Active in dental data 2026-2026Pear 2 Active in dental data 2026-2026pysa 3 Active in dental data 2021-2021Qilin 18 Active in dental data 2024-2026Quantum (attributed by researchers; not named by the company) 1 Active in dental data 2022-2022ransomed 1 Active in dental data 2023-2023RansomHub 3 Active in dental data 2024-2025Rhysida 4 Active in dental data 2024-2026Royal 3 Active in dental data 2022-2023SafePay 6 Active in dental data 2025-2026Shiba 1 Active in dental data 2026-2026ShinyHunters (claimed) 1 Active in dental data 2026-2026Sinobi 8 Active in dental data 2025-2026snatch 1 Active in dental data 2023-2023SpaceBears 6 Active in dental data 2024-2026Termite 2 Active in dental data 2026-2026The Gentlemen 9 Active in dental data 2025-2026titan 1 Active in dental data 2026-2026trinity 1 Active in dental data 2024-2024worldleaks 1 Active in dental data 2026-2026 /group/bianlian
BianLian
6 dental records in the last 5 years, across 3 states or countries.Also known as—
Typeransomware/extortion group
Active in dental data2022-2025
Dental victims (all years)6
First seen (5-yr records)Aug 30, 2022
Last seen (5-yr records)Mar 31, 2025
Law-enforcement record
CISA/FBI advisory AA23-136A
Dental records attributed to BianLian · last 5 years
Listed by BianLian on a leak site · Mar 31, 2025CA
Sonrisas Dental Health Regulator filing locatedClaim reported
Listed by BianLian on a leak site · Mar 7, 2025MN
Minnesota Orthodontics and Dentofacial Orthopedics, P.A. Practice · Hacking/IT Incident · Network Server
Regulator filing locatedClaim reported
Listed by BianLian on a leak site · Jun 21, 2024US
Dental practice · US Other dental org · Leak-site claim
Claim reported
Listed by BianLian on a leak site · Apr 11, 2023US
Dental practice · US Other dental org · Leak-site claim
Claim reported
Listed by BianLian on a leak site · Nov 25, 2022US
Dental practice · US Other dental org · Leak-site claim
Claim reported
Listed by BianLian on a leak site · Aug 30, 2022US
Dental practice · US Other dental org · Leak-site claim
Claim reported
Dates shown are for the related public record. Leak-site metadata is credited per CC BY 4.0 where used. Group names are shown as text only: no logos, no rankings.