On May 1, 2026, the Colorado Dental Wellness Center appeared on the leak site of the Anubis ransomware group. Public reporting indicates the dental practice suffered a ransomware attack in which internal files were exfiltrated. Clients’ medical data is among the information now at risk.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
The listing was first observed on the Anubis leak site and documented by ransomware.live. Available reporting describes the incident as a classic ransomware deployment: attackers gained access, exfiltrated files, and later published a sample of the stolen data as proof. The exact number of affected patients remains unknown, but any client who has visited the practice in recent years could have records exposed. Internal files and medical data are confirmed categories in the leak announcement. No evidence has surfaced that payment card details or Social Security numbers were the primary target; the focus appears to be on health records and related administrative documents.
Why This Matters for You and Your Family
When a local dental office is hit, the impact lands directly on ordinary families. Medical histories, treatment notes, insurance details, and contact information can give criminals enough to impersonate you with insurers, open fraudulent accounts, or sell your data on underground forums. For parents, the breach can also expose children’s dental records, which sometimes include home addresses, phone numbers, and guardian information. Once that data leaves a trusted provider’s control, it circulates indefinitely. You cannot assume the practice will notify every patient quickly or that the ransomware operators will delete the files after any ransom demand.
The Doxxing and Identity-Chain Implications
Health data rarely travels alone. A dental record often links your name, date of birth, address, phone number, and email. Those details can be chained with usernames found in other breaches to map your full online footprint. Attackers then target linked accounts—especially email, banking, or social media—for takeover. Public reporting on similar incidents shows that medical leaks frequently become the foundation for long-term identity theft and doxxing campaigns. Gaming accounts belonging to children are particularly vulnerable because kids often reuse simple passwords or email addresses tied to family accounts. A single credential leak can cascade into full account takeovers across platforms.