On April 13, 2025, Promenade Village Dental in Canada may have had its internal files stolen and published by the nightspire ransomware group after the clinic apparently did not meet the attackers’ demands.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Public reporting indicates that nightspire listed the Canadian dental practice on its leak site and began releasing what it described as exfiltrated internal documents. The exact number of patients or staff affected remains unknown because the sample files released so far do not include a full patient list. Available reporting describes the exposed material as internal files rather than a structured database of names, addresses, and health records. No specific deadline for payment was publicly detailed in the initial listing, though ransomware groups routinely set short windows before full data publication.
Why This Matters for You and Your Family
When a local health provider loses control of its files, the information inside often includes names, dates of birth, insurance details, treatment notes, home addresses, phone numbers, and sometimes Social Security or Social Insurance numbers. Even if your own records are not among the first samples posted, the breach puts you and your family at elevated risk of identity theft, insurance fraud, and phishing campaigns that appear to come from a trusted dentist’s office. A single leak like this can give criminals enough personal details to open accounts in your name or to impersonate you when contacting banks or government agencies.
The Doxxing and Identity-Chain Risk
Stolen dental-clinic files frequently contain email addresses, phone numbers, and family-member references that link together. Attackers combine these fragments with data from earlier breaches to build complete identity chains. A phone number found in one record can be matched to a gaming username; an email tied to your child’s orthodontic appointment can be used to reset passwords on other services. Once the chain exists, doxxing escalates quickly from leaked medical notes to public harassment or targeted scams against every member of the household.