Threat actors · /threat-actors

Threat actors

Groups that have listed US dental organizations on leak sites, with each claim tied to its record and public sources. Listed alphabetically, not ranked.

Attribution is a claim, not a finding.A group posting an organization's name on a leak site does not prove it was responsible, or that data was taken. DDSBreach has not verified these claims, and the organizations may dispute them. We never link to leak sites, onion addresses or samples.

71Groups with dental recordsLast 5 years · DDSBreach records

192Dental records with a named groupClaims and attributions, last 5 years

12Groups with a law-enforcement actionTakedowns, sanctions or CISA/FBI advisories

GroupClaims

/group/sinobi

Sinobi

8 dental records in the last 5 years, across 5 states or countries.

Also known as—

Typeransomware/extortion group

Active in dental data2025-2026

Dental victims (all years)8

First seen (5-yr records)Jul 7, 2025

Last seen (5-yr records)Jan 21, 2026

RansomLook (CC BY 4.0) ↗︎

Dental records attributed to Sinobi · last 5 years

Listed by Sinobi on a leak site · Jan 21, 2026WA

Bayside Dental

Practice · Cyberattack / Ransomware · Network Server

Regulator filing locatedCorroboratedClaim reported

HHS OCR Breach Portal ↗︎Washington AG ↗︎RansomLook (CC BY 4.0) ↗︎HIPAA Journal ↗︎

Open record →

Listed by Sinobi on a leak site · Jan 11, 2026TX

Pecan Tree Dental, PLLC

The covered entity (CE), Pecan Tree Dental, PLLC, reported that a workforce member opened an infected PDF file. The CE determined that clinical, demographic, and financial protected health information (PHI) for 13,300 individuals was affected by the incident. In response to the breach, the CE reported that it implemented improved technical safeguards and retrained workforce members to better protect its PHI. OCR…

Regulator filing locatedCorroboratedClaim reported

HHS OCR Breach Portal ↗︎RansomLook (CC BY 4.0) ↗︎Becker's Dental ↗︎

Open record →

Listed by Sinobi on a leak site · Dec 2, 2025US

Dental practice · US

Other dental org · Leak-site claim

Claim reported

RansomLook (CC BY 4.0) ↗︎

Open record →

Listed by Sinobi on a leak site · Nov 11, 2025US

Dental practice · US

Other dental org · Leak-site claim

Claim reported

RansomLook (CC BY 4.0) ↗︎

Open record →

Listed by Sinobi on a leak site · Oct 21, 2025US

Dental practice · US

Other dental org · Leak-site claim

Claim reported

RansomLook (CC BY 4.0) ↗︎

Open record →

Listed by Sinobi on a leak site · Oct 20, 2025US

Dental practice · US

Other dental org · Leak-site claim

Claim reported

RansomLook (CC BY 4.0) ↗︎

Open record →

Listed by Sinobi on a leak site · Oct 10, 2025FL

Complete Milling Lab

Lab · ransomware

CorroboratedClaim reported

RansomLook (CC BY 4.0) ↗︎

Open record →

Listed by Sinobi on a leak site · Jul 7, 2025OH

K&E Advanced Dentistry

The covered entity (CE), K&E Advanced Dentistry reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 1,772 individuals. The PHI involved demographic and financial information. The CE notified HHS and the affected individuals. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals,…

Regulator filing locatedClaim reported

HHS OCR Breach Portal ↗︎RansomLook (CC BY 4.0) ↗︎

Open record →

Dates shown are for the related public record. Leak-site metadata is credited per CC BY 4.0 where used. Group names are shown as text only: no logos, no rankings.