smileteam.com.au Listed by safepay Ransomware Group

On March 6, 2026, the Australian orthodontic clinic chain SmileTeam.com.au appeared on the leak site of the Safepay ransomware group. The company, a privately owned provider of dental alignment and orthodontic services, is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of patients and staff affected remains unknown, any individual who has used SmileTeam’s services in recent years should assume their personal information may now be in attackers’ hands.

Reported Details of the Breach

Public reporting on the Safepay leak site indicates that attackers successfully exfiltrated internal files from SmileTeam’s systems. The data types exposed have not been fully itemised in available reporting, but ransomware incidents of this nature routinely include patient records, contact details, addresses, dates of birth, and payment information. The listing appeared on March 06, 2026, and the group typically sets a deadline for payment before releasing or selling the stolen data. SmileTeam has not yet issued a public statement confirming the incident or detailing the precise scope.

Why This Matters for You and Your Family

If you or your children have received orthodontic treatment from SmileTeam, your personal and health information could be exposed. Dental clinics hold sensitive data that combines medical history with home addresses, phone numbers, email accounts, and sometimes bank details. Once this information leaves a company’s control, it can be used for identity theft, insurance fraud, or as the starting point for more targeted attacks against your household. Families often underestimate how many records a single clinic visit creates; each child’s file adds another set of details that can be linked back to parents.

The Doxxing and Identity-Chain Risk

Stolen healthcare files rarely stay isolated. Attackers combine them with credential leaks from other breaches to build detailed profiles. An email address allegedly taken from SmileTeam can be tested against gaming platforms, school portals, and social media accounts. Public reporting shows these chains frequently lead to doxxing, where real-world identities are published alongside usernames, photos, and family connections. Gaming accounts belonging to children are especially vulnerable because parents often reuse passwords or security questions that appear in medical or billing records.

Safepay’s Publicly Known Track Record

Public reporting attributes the Safepay ransomware group with operations that emerged in late 2024. The group has targeted mid-sized organisations across healthcare, education, and professional services. Its typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. Safepay then demands payment for non-disclosure, publishing samples on its leak site when victims do not pay by the stated deadline. The group’s focus on healthcare providers suggests it understands the high sensitivity and potential embarrassment value of patient data.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the SmileTeam breach connects to.
• Rotate any password you ever used at SmileTeam.com.au wherever it has been reused, and switch on two-factor authentication using an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes children’s gaming accounts that often chain back to the same addresses and parent emails exposed in healthcare records.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to chase every copy of your family’s information yourself.

The SmileTeam breach is a reminder that healthcare providers remain prime targets and that one clinic visit can feed a much larger identity compromise chain. Acting quickly on the exposed information gives you the best chance of limiting damage before it spreads further. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to understand and close the gaps this incident has created for your family.