ProSmile Family Dental Care Listed by CRPxO Ransomware Group

On July 27, 2026, ProSmile Family Dental Care was listed on the leak site of the CRPxO ransomware group. The healthcare provider, which operates multiple dental offices, had 9.6 GB of internal files exfiltrated during a ransomware attack. The listing does not specify the exact number of patients or employees affected, nor does it detail the precise categories of data contained in the files.

What's Publicly Reported from the Leak Site

The CRPxO leak site entry states that ProSmile Family Dental Care suffered a ransomware incident in which attackers exfiltrated internal files before encryption. The disclosure indicates 9.6 GB of data was taken. As of the listing date of July 27, 2026, the group had not publicly released samples of the stolen material, and the notification does not quantify how many patient records or employee documents were included. The primary disclosure source is the CRPxO onion site, mirrored and indexed by ransomware.live at the provided link.

Why This Matters for You and Your Family

If you or your family members have ever been patients at ProSmile Family Dental Care, your personal and medical information may now sit in an attacker-controlled archive. Dental practices routinely store full names, dates of birth, Social Security numbers, addresses, phone numbers, insurance details, treatment records, and sometimes driver’s license scans. Even without an exact patient count, the exposure of nearly ten gigabytes of internal files means the risk is real and immediate. Medical data carries lifelong sensitivity; once it leaves the clinic’s control, it can be used for identity theft, insurance fraud, or targeted phishing for years.

The Doxxing and Identity-Chain Risk

Ransomware groups rarely stop at dumping raw files. They frequently parse stolen documents for email addresses, phone numbers, and employee logins, then cross-reference them against other breaches. This creates doxxing chains that link your dental records to gaming accounts, social-media handles, and family addresses. A child’s gaming username found in a parent’s dental file can become the entry point for account takeovers that expose chat logs, location data, and photos. These identity chains are difficult to map manually. DoxxScan by GalaxyWarden continuously monitors across 13.1 billion+ breach records and more than 100 platforms, using AI-powered identity-chain mapping to connect handles, emails, phones, and real identities while providing hands-on remediation by specialists and full household coverage, including children’s gaming accounts.

CRPxO’s Known Track Record

Public reporting attributes CRPxO with emerging in late 2024 as a ransomware-as-a-service operation that focuses on small-to-medium businesses, including healthcare providers. The group typically gains initial access through phishing or exploited remote desktop protocols, exfiltrates data before deploying encryption, and then uses dual-extortion tactics: threatening to publish sensitive files while simultaneously demanding payment to prevent release. Notable prior victims have included regional medical clinics and professional service firms. Their playbook emphasizes speed and public shaming on their leak site when victims do not pay within short deadlines, though the exact ransom amounts demanded from ProSmile Family Dental Care remain unknown.

What to do

• Run a DoxxScan to map every link between your email, phone, dental patient ID, and any associated online handles so you can see the full exposure chain.
• Enable continuous DoxxScan monitoring so the next breach that touches your family is caught and acted upon within hours rather than months.
• Rotate any password you ever used at ProSmile Family Dental Care or on their patient portal, and secure every reused account with a hardware key or authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same residential address or parent email.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise take dozens of hours to manage manually.

The breach of ProSmile Family Dental Care shows how even routine medical visits can feed long-term identity risk when ransomware operators treat patient files as leverage. Staying ahead requires more than changing one password; it demands visibility into how your information travels across the internet and decisive action when new leaks appear. Source: CRPxO leak site listing via ransomware.live