HexaCream Dental Laboratory Listed by blackshrantac Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 28, 2025, the ransomware group blackshrantac listed HexaCream Dental Laboratory on its leak site and stated that internal files had been taken during a ransomware attack. The number of people whose information may be involved has not been disclosed. Dental laboratories routinely process records that contain personal and medical details. Any confirmed exposure of such material therefore carries direct implications for patient privacy and the security of health-related data held by the organisation.

Breaking down the breach

The only confirmed detail is the listing itself. The group claims to have exfiltrated internal files, yet no information has been released about the volume of data, the date of the intrusion, or the method used to gain access. The number of individuals potentially affected remains unknown.

Inside blackshrantac

Blackshrantac is a ransomware operation that follows the double-extortion model common among current groups. It typically encrypts systems and removes copies of files, then lists the victim on a leak site when a ransom demand is not met. The group’s public postings serve as its primary means of pressure. No independent confirmation of the claims made against HexaCream Dental Laboratory has been reported.

Who is HexaCream Dental Laboratory?

HexaCream Dental Laboratory operates in the dental prosthetics and restorative sector. Organisations of this type receive prescriptions, impressions, scans and patient identifiers from dental practices in order to manufacture crowns, bridges, dentures and orthodontic appliances. They therefore accumulate records that link individuals to specific clinical information.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No further inventory of data categories has been published. Dental laboratories commonly hold patient names, dates of birth, addresses, treating dentist details, clinical notes and imaging files. Whether any of these categories are present in the claimed exfiltration cannot be confirmed from the information released so far.

The real-world impact

Exposure of internal files from a dental laboratory could result in the disclosure of personal health information that patients expect to remain confidential. Such material may be used for targeted fraud, medical-identity misuse or unwanted contact. For the organisation, the incident adds the operational burden of incident response, potential regulatory notification and the need to review security controls around file storage and access.

Were you affected?

Individuals who have received dental work through a practice that uses HexaCream Dental Laboratory can contact that practice or the laboratory directly to ask whether their records were involved. Monitoring financial and medical accounts for unusual activity remains a standard precaution. Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.