Soniva Dental Care, a multi-location dental practice with 14 locations in the United States, disclosed a data breach after a ransomware attack was discovered in late May 2026.
The breach was the result of a ransomware attack that targeted the company’s remote desktop web services infrastructure. According to the company’s notification, the incident was identified when the company’s IT support company noticed irregularities related to remote access session hosts. Within a few minutes, it became clear that an attack had occurred.
On June 1, 2026, six days after the breach was discovered, a ransomware group known as The Gentlemen claimed responsibility for the attack. The claim was posted on a dark web forum hosted on the Tor network. The group stated that it had obtained the organization’s data and intended to publish the information within nine to 10 days.
As of July 28, 2026, the ransomware group indicated the full dataset has been made publicly available and includes additional information types like patients’ Social Security numbers.
Through its investigation, Soniva Dental Care determined that certain personal information belonging to patients associated with the practice might have been accessed during the incident.
The disclosed types of personally identifiable information (PII) that may have been exposed included names, addresses, dates of birth, driver’s license numbers and government-issued IDs.
Protected health information (PHI) was also among the data that may have been compromised.
Some of the company’s locations have posted a notice to patients:
Soniva Dental Care’s response
Soniva Dental Care is offering complimentary identity protection monitoring services at no cost to affected patients. Those who would like to participate in this offer or who have questions about the incident can contact the company toll-free at 844-473-3900.
The notification was signed by Sumeet Malhotra, DMD, the practice owner, who stated that the company “sincerely apologize[s] for any concern” the incident may have caused and that “protecting your privacy is extremely important to us.”
Soniva Dental Care’s locations have reported the breach to the Texas Attorney General and the U.S. Department of Health and Human Services.
