SWISHSMILES.COM Listed by clop Ransomware Group

On November 25, 2023, the Austin, Texas dental practice SwishSmiles.com appeared on the leak site operated by the Clop ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The disclosure does not specify the number of patients or employees affected, nor does it detail the exact categories of records taken.

Reported Details from the Listing

The Clop leak site entry for SwishSmiles.com states that the dental provider suffered a ransomware incident resulting in data exfiltration. It lists the company as a victim and provides a partial sample of the allegedly stolen material, though the full volume and precise contents remain undisclosed by the group. The notification does not include a public ransom demand amount or a specific negotiation deadline. Public mirrors of the leak site, such as ransomware.live, continue to host the listing without additional quantification from Clop.

Internal files exfiltrated is the only description of compromised material supplied in the primary disclosure. No patient names, addresses, Social Security numbers, insurance details, or clinical records are explicitly confirmed in the public listing itself.

Why This Matters for You and Your Family

If you or your family members have received dental care at Swish Dental in Austin, your personal information may now sit in an attacker-controlled archive. Dental practices routinely collect full names, home addresses, dates of birth, phone numbers, email addresses, insurance policy numbers, and sometimes Social Security numbers for billing. When these records leave the clinic’s control, they become raw material for identity theft, insurance fraud, and targeted phishing campaigns aimed at households.

Even when exact record counts are unknown, the exposure of internal files from a family-oriented dental provider creates concrete risk for ordinary patients. A single leaked insurance document can be enough for criminals to file false claims or open new accounts in your name. Families with children in the practice face added exposure because pediatric records often link parents’ and children’s data together.

Doxxing and Identity-Chain Risks

Stolen dental files rarely stay isolated. Attackers routinely cross-reference leaked emails, phone numbers, and addresses against other breach repositories to build detailed identity chains. A seemingly harmless appointment reminder can be paired with a later-exposed password or gaming username, allowing criminals to seize online accounts, impersonate family members, or publish personal information on doxxing forums.

Credential leaks like this one cascade into account takeovers and doxxing chains, especially when the same email or password has been reused across services. Children’s gaming accounts are particularly vulnerable because they frequently share household email addresses or phone numbers listed in family dental records. Once an attacker controls one account, they can pivot to others, escalating from data theft to real-time harassment or financial fraud.

Clop’s Publicly Known Track Record

Public reporting attributes Clop’s emergence to 2019, when the group began deploying ransomware built on the leaked source code of other families. The actors gained notoriety for targeting large enterprises and exploiting vulnerabilities in file-transfer software such as MOVEit and GoAnywhere. Notable prior victims include major corporations in healthcare, finance, and manufacturing sectors. Clop’s typical playbook involves initial access through unpatched remote-access tools or phishing, followed by exfiltration of sensitive files before encryption. The group then leverages dual-extortion tactics: threatening to publish stolen data on their leak site if ransom is not paid. While many ransomware operations focus solely on encryption, Clop consistently emphasizes data exposure as the primary pressure point.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have appeared in the SwishSmiles.com files.
• Rotate any password you ever used at Swish Dental or related patient portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts tied to the same contact details.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume weeks of your time.

The incident underscores that even local healthcare providers can become gateways to broader identity compromise when ransomware groups like Clop choose to publish stolen material. Staying ahead requires more than reactive checks; it demands ongoing visibility into how your personal data travels across the internet. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach and future ones can exploit.