smilecenterutah.com Listed by safepay Ransomware Group

On December 17, 2025, the dental practice Smile Center Utah in Provo appeared on the leak site of the safepay ransomware group. The attackers posted proof that they had exfiltrated internal files from the clinic’s systems, placing the personal and medical information of its patients at risk.

What's Publicly Reported from Reporting

Public reporting indicates that safepay listed smilecenterutah.com on its dark-web blog and provided samples of the stolen data. The practice is a private dental office offering routine and specialized oral healthcare to families in the Provo area. Available details confirm that internal files were taken during a ransomware incident, although the exact number of patients affected has not been disclosed. No public statement from the clinic had been issued at the time of the posting.

Why This Matters for You and Your Family

When a local healthcare provider is breached, the information exposed often includes names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes. For many families this represents the complete set of data needed for identity theft, fraudulent tax filings, or medical fraud. Patient records carry lifelong sensitivity; once they leave the clinic’s control, they can circulate for years on criminal marketplaces. If you or your children have ever been patients at Smile Center Utah, this incident directly concerns your household.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one database. A single exposed email or phone number can be combined with information from earlier breaches to build a detailed profile. Attackers then target linked accounts — especially gaming logins used by children — to escalate from data theft to full doxxing. Credential leaks like this one frequently cascade into account takeovers across unrelated services. The chain can quickly reach family members who never visited the dental practice themselves.

Safepay’s Publicly Known Track Record

Public reporting attributes safepay with emerging in 2024 as a ransomware operation that combines encryption of victim systems with data exfiltration. The group has listed healthcare providers, small manufacturers, and local government offices among its prior victims. Its typical playbook involves initial access through phishing or unpatched remote desktop services, followed by exfiltration of sensitive folders, then publication on its leak site when ransom demands go unpaid. The group sets short payment deadlines, often threatening to release full datasets if the victim does not pay.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this claimed breach connects to.
• Rotate any password you ever used at Smile Center Utah — or any password reused across other sites — and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after healthcare leaks.
• Let remediation specialists handle the time-consuming work of sending takedown notices to data brokers and monitoring for resale of your family’s information.

The breach of Smile Center Utah illustrates how quickly a routine dental visit can become part of a larger identity exposure chain. Acting promptly on the exposed credentials and mapping your full digital footprint limits the damage. Start your DoxxScan trial today for continuous monitoring across billions of records, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes your children’s gaming accounts. Doing so gives you and your family a practical defense against the next wave of leaks that inevitably follow incidents like this one.