SmilePoint Dental Group Listed by spacebears Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
SmilePoint Dental Group was listed by the spacebears ransomware group on May 12, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may be affected; check with the organisation or your dental provider to confirm whether your data is involved and what steps to take.
What happened
The incident came to light through spacebears’ listing of SmilePoint Dental Group. The group stated that internal files had been exfiltrated during a ransomware operation. No further technical details, such as the date of intrusion, volume of data, or encryption status, have been made public by the organization or independent sources. The number of people potentially affected is currently unknown.
Who is spacebears?
Spacebears is a ransomware operator that follows the common pattern of encrypting systems and exfiltrating data before listing victims on a dedicated leak site. Groups of this type typically seek payment in exchange for not publishing stolen material. Their listings function as a public claim of access rather than independently verified evidence of the contents or scale of any specific breach.
Who is SmilePoint Dental Group?
SmilePoint Dental Group operates between 26 and 28 dental offices across Texas and New Mexico. It manages multiple clinic brands that provide general dentistry, orthodontics, cosmetic procedures, implants, and preventive care, primarily in smaller communities. Organizations in this sector routinely maintain electronic records that include patient identifiers and treatment information, making them frequent targets for data theft.
The information in question
The only data type explicitly referenced in the listing is internal files exfiltrated during the ransomware attack. Specific categories of information, such as patient records or database contents, have not been confirmed by the organization. Dental practices of this size typically store patient names, addresses, dates of birth, Social Security numbers, insurance details, and medical histories, but whether any of these elements were among the claimed files is unconfirmed.
Why it matters
Unauthorized access to internal files from a multi-location dental provider can expose individuals to risks of identity misuse or medical privacy violations. For the organization, the incident adds to operational costs associated with investigation, potential regulatory review, and restoration of systems. Because the exact data set remains undisclosed, the full extent of downstream effects on patients or staff cannot yet be measured.
What to do if you're exposed
Individuals who received notification from SmilePoint Dental Group or suspect their information may be involved should review account statements for unusual activity and place fraud alerts with credit bureaus. Changing passwords for any linked online portals and enabling multi-factor authentication are immediate steps. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances in public listings.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Johnson & Johnson Innovative Medicine Listed by spacebears Ransomware GroupFitcrunch Listed by spacebears Ransomware GroupSalters Propane Hit by SpaceBears RansomwareRidge Law Firm Listed by spacebears Ransomware GroupLatest breaches
Publicly posted by spacebears — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.