Smiles By Steedman Listed by spacebears Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Patients of a small dental practice in Washington state may now face the practical risk that their personal and medical information has left the clinic’s control. On 5 September 2025 the ransomware group spacebears listed Smiles By Steedman on its leak site, claiming it had exfiltrated internal files during an attack. The number of people affected remains unknown, and public detail about the precise contents is limited, yet the mere listing is enough to put patients and staff on notice that sensitive records could surface or be misused.

For ordinary people who have visited the practice, the stakes are concrete: identity documents, medical histories and financial paperwork are the kinds of material that can enable fraud, insurance abuse or unwanted contact. This article sets out only what is known from the public listing and the practice’s own description, without speculation.

What happened

According to the reported listing dated 5 September 2025, Smiles By Steedman was named by the spacebears ransomware group as a victim of a ransomware attack in which internal files were exfiltrated. No public confirmation of the attack’s technical method, the date of intrusion, or the volume of data taken has been released. The number of individuals whose information may be involved is listed as unknown. The group’s leak-site entry constitutes a claim that data was removed; independent verification of that claim has not been made public.

The practice’s own website description, reproduced in the report, identifies it as a family and general dentistry office in Lake Stevens, Washington. Beyond the group’s assertion that internal files were taken, further operational details of the incident remain undisclosed.

The group behind it: spacebears

Spacebears is a ransomware operation that follows the now-common double-extortion model: encrypting systems while simultaneously copying data, then threatening to publish the stolen material if a ransom is not paid. The group maintains a leak site where it posts victim names and, in some cases, sample files or full archives. Public reporting on spacebears has documented its use of standard ransomware tooling and its practice of listing organisations across multiple sectors once negotiations stall or fail.

In this instance the group claims Smiles By Steedman is among its victims and that internal files were exfiltrated. No additional statements attributed specifically to this victim—such as ransom demands, file counts or publication deadlines—appear in the available facts. The listing itself should therefore be treated as an unverified claim until further evidence emerges.

Who is Smiles By Steedman?

Smiles By Steedman is a family and general dentistry practice located in Lake Stevens, Washington. Its public description emphasises personalised, affordable care for patients and their families, covering the full range of routine and restorative dental services. Like most dental offices of this size, it maintains electronic and paper records that typically include patient contact details, insurance information, treatment notes, radiographs and billing records.

A breach at such a practice is consequential because dental records sit at the intersection of personal identity data and protected health information. Even a modest patient base can generate years of cumulative medical and financial documentation. When those records leave the practice’s control, the individuals named in them face risks that extend well beyond the clinic’s walls.

What data was at risk

The facts state that internal files were exfiltrated in a ransomware attack. The reported summary associated with the listing further names patients’ personal information, documents and medical histories, the company network database, financial documents and other information. Exact file inventories, record counts and confirmation that every listed category was in fact taken remain unconfirmed. Organisations of this type routinely hold the categories described, yet the precise contents of the material claimed by spacebears have not been independently verified in public sources.

What's at stake

For patients, the primary risks are identity theft, fraudulent insurance claims and the exposure of medical details that many regard as private. Medical histories and financial documents can be combined with basic personal identifiers to open accounts, file false claims or target individuals with tailored scams. Staff whose employment or payroll records may have been included face similar exposure of their own personal data.

For the practice itself, the incident carries operational, regulatory and reputational consequences. Dental offices are subject to health-privacy rules that require notification and protective measures when patient data is compromised. Even without confirmed patient counts, the organisation must assume that some portion of its records may now be outside its control and prepare accordingly. The absence of public detail on scale does not reduce the need for careful response.

Were you affected?

If you have been a patient or employee of Smiles By Steedman, treat the listing as a prompt to take basic protective steps while further information is awaited. Public detail remains limited, so these measures are precautionary rather than proof of individual exposure.

• Monitor bank, credit-card and insurance statements for unfamiliar activity and report anomalies promptly.
• Place a free fraud alert or credit freeze with the major credit bureaus if you are concerned about identity theft.
• Be alert to unexpected calls, emails or texts that reference dental treatment, insurance or personal details; verify any such contact through official channels before responding.
• Request a copy of your dental records from the practice so you know exactly what information is held under your name.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already appeared in other incidents.

Continue to watch for official notices from the practice or from regulators. Until more concrete details are released, measured vigilance is the most practical response available to those who may be affected.

AICompiled with AI assistance from public sources and published under our editorial standards.