Santa Barbara Endodontics paid nothing to the extortion crew that encrypted its records, and is sending patient letters anyway.
The California practice found a ransom note waiting on October 8, 2026, after confirming patient records had been encrypted. It restored from backups, refused payment, and published a breach notice on November 7. The Gentlemen, the group behind the intrusion, is threatening to publish what it took.
Whether patient data actually left the network remains unresolved. The practice has not determined the scope of exposure or how long the intruders had been inside before the note appeared.
Potentially exposed data covers names, Social Security numbers where supplied, dental and medical histories, treatment and diagnosis details, insurance information and past claim records. Twelve months of credit monitoring was offered, and patients were told to watch explanation of benefits statements.
Two more dental disclosures
Hollister Family Dental and Implant Center traced its incident to a third-party appointment management platform, compromised intermittently from February 12 to May 8, 2026, before the practice was alerted and locked it down. Names, contact details, birth dates, appointment information, provider notes, symptoms and medications were exposed. Two years of monitoring was offered.
Park Dental Partners, a Roseville, Minnesota support organization serving practices in four states, reported an intrusion on August 26 and 27, 2026. Names, birth dates, diagnoses, treatment and policy details were confirmed exposed on October 7.
None of the three has published an affected count. The pattern worth flagging for practice managers is the third-party platform – small clinics inherit the security posture of whichever scheduling vendor they chose.
