Crpxo Ransomware Claims Top Notch Dentistry of Dallas: Ransomware Claim — What’s Alleged & What To Do
Crpxo Ransomware has claimed responsibility for a breach at Top Notch Dentistry of Dallas on July 9, 2026, exposing patient records, personal information, and business data. If you are a patient or have shared information with the practice, check for any notifications and take steps to protect your accounts.
What happened
The only confirmed public detail is the July 9, 2026 listing on CRPxO’s leak site. The entry names Top Notch Dentistry of Dallas and refers to patient records, personal information, and business data. No information has been released about how access was obtained, how long the actors were present in the network, or whether data were encrypted in addition to being copied. The number of individuals whose records may be involved remains unknown.
Inside CRPxO
CRPxO is a ransomware group that follows the double-extortion model common among current operators. After gaining access, the group typically encrypts systems and exfiltrates files, then posts samples or file listings on a dedicated leak site to pressure victims into paying. The group’s listings function as a public claim of possession; independent verification of the data’s authenticity or scope is rarely available at the time of posting. Similar operators have repeatedly focused on organizations that maintain regulated personal and health information because those data retain value on illicit markets.
About Top Notch Dentistry of Dallas
Top Notch Dentistry of Dallas is a dental practice located in Texas that provides general and emergency dental services. Practices of this type routinely collect and store patient identifiers, medical histories, insurance details, and appointment records. They also maintain internal business files such as billing information and vendor contracts. Because these records contain both health and financial data, a breach can affect individuals over an extended period.
The information in question
The leak-site listing names patient records, personal information, and business data as the material obtained. No further inventory or sample files have been published in public reporting. The precise categories of data, the number of records, or any indication of whether the files were encrypted or redacted therefore remain unconfirmed beyond the initial claim.
What's at stake
For individuals, exposure of dental and medical records can lead to misuse of personal identifiers, insurance fraud, or unwanted disclosure of health details. For the practice, the incident may trigger regulatory review under health-privacy rules and require notification, investigation, and possible remediation costs. The absence of a confirmed record count makes it difficult for affected people to assess their individual exposure at this stage.
Were you affected?
Individuals who have received services from Top Notch Dentistry of Dallas should monitor their financial accounts and insurance statements for unusual activity. They may also contact the practice directly to ask about notification procedures. A free exposure scan of an email address against known breach data sets can indicate whether the address has appeared in previously published lists, though it cannot confirm involvement in this specific incident.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Johnson & Johnson Listed by CRPxO Ransomware GroupProSmile Family Dental Care Listed by CRPxO Ransomware GroupLeah Walker Orthodontics Listed by CRPxO Ransomware GroupDignity Phoenix Listed by CRPxO Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Crpxo Ransomware Claims Top Notch Dentistry of Dallas →
Publicly posted by crpxo — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.