smilecenterutah.com Listed by safepay Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 17, 2025, the ransomware group safepay listed smilecenterutah.com on its site. The listing states that internal files were exfiltrated from the organization during a ransomware attack. The number of people whose information may be involved has not been disclosed. The practical stakes center on the handling of patient records at a dental practice. Individuals who received care at the clinic have no confirmed public information about whether their details appear among the claimed files.

What happened

The incident came to light through a listing posted by safepay on December 17, 2025. The group claims internal files were taken from smilecenterutah.com in a ransomware operation. No further details on the timing of the intrusion, the method of access, or the volume of data have been made public. The number of people affected remains unknown.

The group behind it: safepay

Safepay is a ransomware operation that has appeared in multiple public listings of compromised organizations. The group typically claims to have encrypted systems and removed data, then posts samples or descriptions on a dedicated site to pressure victims. Its listings function as unverified assertions until independently confirmed by the affected organization or law enforcement. No additional statements from safepay specific to smilecenterutah.com beyond the basic claim of file exfiltration have been recorded in the available facts.

smilecenterutah.com and its sector

Smile Center Utah operates as a private dental practice in Provo, Utah, delivering routine and specialized oral healthcare. Dental clinics routinely collect and store patient identifiers, treatment histories, insurance details, and appointment records. A breach at such a provider can expose information that remains sensitive over long periods because dental records are not frequently updated or replaced.

What data was at risk

The only data category named in connection with the listing is internal files exfiltrated during the ransomware attack. The precise contents of those files have not been disclosed. Organizations of this type commonly hold patient names, dates of birth, addresses, clinical notes, radiographs, billing information, and insurance data, yet it is not confirmed whether any of these categories were included.

Why it matters

Unauthorized access to internal files at a dental practice can create lasting exposure for patients whose records contain identifying and medical details. For the organization, the incident adds operational disruption and potential regulatory obligations under healthcare privacy rules. Both the scale of exposure and any subsequent use of the material remain unconfirmed at this stage.

Were you affected?

Patients of Smile Center Utah who have not received direct notification from the practice have limited public options for confirmation. The following steps provide a starting point for those concerned:

• Contact the practice directly to inquire about the incident and any available guidance.
• Review statements from financial accounts and insurance providers for unusual activity.
• Run a free exposure scan of your email address against known breach data sets to check for prior appearances of your information.

AICompiled with AI assistance from public sources and published under our editorial standards.