Three separate incidents have landed in the breach disclosure pile this week, spanning a Texas dental chain, a Michigan senior care manager, and a New York billing firm.
The San Antonio dental group Soniva Dental Care, which spans 14 Texas practices, was alerted by its managed IT provider on May 26 to odd remote desktop activity. The response included terminating external communications and locking down the infrastructure, but a file review found names, addresses, dates of birth, driver’s license numbers, government IDs, and medical details may have been exposed. The Texas Attorney General was told up to 30,000 residents could be affected, and the Gentlemen ransomware group has taken credit for the intrusion.
Optalis Management Solutions, which runs senior living and healthcare facilities in Michigan, reported a breach touching 13,723 people. Investigators found unauthorized access from April 14 to April 19, 2025, confirmed exfiltration on June 10, 2025, and began mailing notifications on June 29, 2026, offering credit monitoring to those whose Social Security numbers were exposed.
New York receivables firm Hudson Valley Medical Billing & Credentialing spotted the intrusion on March 6, potentially involving 5,459 patients whose records it services for healthcare clients. Unable to rule out data access or copying, the company mailed notification letters and said it has tightened its technical safeguards.
