Skip to content
Back to Blog
high severity December 17, 2024 · 3 min read Unverified claim — what this is

Artistic Family Dental;Value Dental Center;Sparkling Smiles Family Dentistry Listed by everest Ransomware Group

If you are a patient of Artistic Family Dental;Value Dental Center;Sparkling Smiles, here’s what is being claimed, and what it would mean for you.

Artistic Family Dental;Value Dental Center;Sparkling Smiles was listed on Everest's leak site. Everest claims to have stolen internal data. This is the group's claim, not a confirmed finding.

Artistic Family Dental;Value Dental Center;Sparkling Smiles Family Dentistry Listed by everest Ransomware Group

On December 17, 2024, the Everest ransomware group listed Artistic Family Dental, Value Dental Center, and Sparkling Smiles Family Dentistry on its leak site, claiming that internal files had been exfiltrated during a ransomware attack. The three dental practices, which appear to serve families across multiple locations, now face public exposure of sensitive business and patient-related records. The listing does not quantify how many patient records were affected.

Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →
Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.

Details from the Leak Site

The primary disclosure on the Everest leak site states that the three dental clinics suffered a ransomware incident in which attackers successfully exfiltrated internal files. A download link hosted on GoFile was provided as proof. The notification does not specify the exact data types beyond “internal files,” nor does it list individual data fields such as names, addresses, Social Security numbers, or insurance details. It also does not disclose the ransom demand or any negotiation status. The practices were grouped together in a single listing, suggesting they may share systems or ownership.

Why This Matters for You and Your Family

If you or your children have received care at Artistic Family Dental, Value Dental Center, or Sparkling Smiles Family Dentistry, your personal health information and contact details may now sit in an attacker’s archive. Dental records frequently contain dates of birth, addresses, phone numbers, email addresses, insurance policy numbers, and sometimes Social Security numbers for billing. Exposure of this data increases risks of identity theft, insurance fraud, and phishing campaigns tailored to look like legitimate dental-office communications. Families are especially vulnerable because a single parent’s record can link to children’s information, creating a broader household exposure surface.

Doxxing and Identity-Chain Risks

Health-care data rarely exists in isolation. Once exfiltrated, it can be cross-referenced with other breaches to build detailed identity profiles. A dental patient’s email and phone number can link gaming accounts, school portals, and social-media handles belonging to the same household. Attackers then use these connections for doxxing, account takeovers, or targeted extortion. Credential leaks of this nature frequently cascade into children’s gaming accounts, where weak or reused passwords allow intruders to harass minors or demand payment from parents. The longer the data remains unmonitored, the more links attackers can forge.

Everest Ransomware Group Track Record

Public reporting attributes the Everest ransomware group with emerging in 2021 and maintaining a double-extortion model: encrypting victim systems while simultaneously exfiltrating data for later public release. The group has targeted hospitals, manufacturers, and professional service firms, often listing multiple related organizations in single posts. Their typical playbook begins with initial access through phishing or exploited remote-desktop services, followed by lateral movement to locate sensitive files, exfiltration over several days, and finally deployment of ransomware. After encryption they publish samples on their leak site and set short deadlines for payment before releasing larger data volumes. The December 17 listing of the three dental practices follows this established pattern.

What to do

  • Run a DoxxScan to map every link between your emails, phone numbers, dental-patient IDs, and real-world identity so you can see the full exposure chain.
  • Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms; the next leak that touches your family will be flagged within hours rather than months.
  • Rotate any password you have used at these dental practices or their patient portals, then enable 2FA through an authenticator app on every account where that password was reused.
  • Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
  • Let remediation specialists handle data-broker takedown requests and opt-out processes so you do not have to chase hundreds of sites yourself.

The exposure of dental-practice records reminds us that even routine medical visits can feed long-term identity risks when systems are breached. Acting quickly on the exposed data and maintaining ongoing visibility is the most practical defense. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this incident has opened.

What the free scan actually returns

Sample resultyou@email.comIllustrative — not a real person

Found on people-search siteswe remove these

These listings are live, public, and legal to remove — and removing them is what we do.

value redacted in this sampleage, relatives, address historySpokeo
value redacted in this samplephone, household, property recordsBeenVerified
value redacted in this sample582 companies checked

Found in breach recordsverifiedreported — unverified

Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.

verifiedvalue redacted in this samplepassword + phone · 2024telecom breach
unverifiedvalue redacted in this sampleclaimed in ransomware listing · 2026leak-site claim

Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.

Check your exposure
Artistic Family Dental;Value Dental Center;Sparkling Smiles is one listing. Your email is probably in others.
We can’t confirm any single incident against the sources we search, so we won’t pretend to. What we can show you is your own exposure — your email against 13.1B+ leaked records and the sites that publish your address. About 15 seconds. No account, no card.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Report details & sourcing

Severity High the filing does not enumerate what was exposed
Disclosed December 17, 2024
Last reviewed August 8, 2026
Affected Unconfirmed
Unverified claim — what this report is
This page documents a public listing on a ransomware/extortion group’s leak site, tracked via public threat-intelligence sources. A listing is the attacker’s claim. GalaxyWarden aggregates and reports such claims; we have not independently verified that a breach occurred, what data (if any) was taken, or the accuracy of anything the group asserts, and the named organisation has not necessarily confirmed the incident. Sections above describe what the listing shows and the group’s documented history — not verified findings about the named organisation. If you represent this organisation and believe anything here is inaccurate, tell us and we’ll review it promptly.
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Share this Post on X Reddit Email