1-800-Dentist Hit by Qilin Ransomware, Health Data of Millions Threatened

The Qilin ransomware group has claimed responsibility for breaching 1-800-Dentist, a major US healthcare referral service, and is threatening to publish the personal and health records of millions of patients unless the company pays a ransom.

Public reporting indicates that the attackers posted sample files on their leak site showing what they describe as patient data, including medical and dental histories, insurance information, payment details, and medical images. 1-800-Dentist handles roughly two million callers each year and works with thousands of dental practices across the country. As of the latest available information, the company has not issued a formal confirmation of the breach. Industry research from sources such as DoxxScan™ continuous monitoring indicates that healthcare organizations remain high-value targets because medical records contain long-term personally identifiable information that cannot simply be changed like a password.

Health Data Exposed

This incident matters to you and your family because the exposed information goes far beyond a name and email address. Health records can reveal conditions, treatments, medications, and insurance details that criminals can use for identity theft, insurance fraud, or targeted scams. If you or any member of your household has ever called 1-800-Dentist to find a dentist, your information may now sit in a ransomware leak folder. Once that data reaches dark web markets or public leak sites, it stays there indefinitely and can be combined with other stolen records to build a complete profile of your life.

Doxxing and Identity Risks

The doxxing and identity-chain implications are especially serious. A single health breach rarely stays isolated. Attackers routinely link leaked emails, phone numbers, and addresses to usernames on social media, gaming platforms, and other services. This creates chains that let them take over accounts, impersonate family members, or harass children whose gaming handles are tied to the same household address or parent email. Credential leaks like this one frequently cascade into account takeovers precisely because people reuse passwords across work, health, and entertainment accounts.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains exist before criminals exploit them.
• Rotate the password you used anywhere it was reused, especially on dental clinic portals, insurance websites, or email accounts, and switch to two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 15.4 billion breach records and more than 100 platforms so the next time your information appears it is caught within hours instead of months.
• Cover the entire household with DoxxScan family protection that extends to dependents and children's gaming accounts, which often become entry points when parent data is already exposed.
• Let remediation specialists handle the takedown requests across data brokers and leak sites while you focus on securing your own accounts.

Healthcare Breaches Continue

The reality is that healthcare breaches will continue as long as medical data retains its value on the black market. Taking concrete steps now can limit the damage from this incident and reduce your exposure to the next one. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and 100-plus platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage also protects children's gaming accounts that frequently link back to the same family information exposed in breaches like this one.