RansomwareHealthcare / Dental·United States

360 Dental PC

Analysis of the 360 Dental PC ransomware attack affecting 11,273 individuals.

Published by the Scrutex.ai Research Team | January 2026

Disclaimer

This advisory is provided for informational and educational purposes only by the Scrutex research team. It is based entirely on publicly available reporting from the sources cited below. Where details are unconfirmed or disputed by the affected organisation, this is noted explicitly. Scrutex does not independently verify internal claims made by affected organisations or threat actors. This advisory should not be interpreted as a confirmed statement of fact regarding any organisation's security posture. Organisations concerned about their own exposure should conduct independent assessments and seek professional legal advice.

At a Glance

Organisation

360 Dental PC

Dental practice in the United States providing general dental care services.

Sector

Healthcare / Dental

Region

United States

Date of Incident

Prior to January 2026 (exact date not disclosed)

Date Disclosed

January 2026

Estimated Impact

11,273 individuals

Data Types Exposed

Protected health information (specific fields not publicly detailed)

Attack Type

Ransomware

Attack Vector

Ransomware deployment (specific group and initial access vector not disclosed)

Current Status

Under investigation. HIPAA breach notification filed.

Severity Assessment

Moderate. Over 11,000 individuals had dental health data exposed in a ransomware attack on a small dental practice.

What Happened

In January 2026, 360 Dental PC disclosed a ransomware attack affecting 11,273 individuals.

The compromised data reportedly includes health data. HIPAA breach notification requirements apply.

Timeline

January 2026

360 Dental PC discloses ransomware attack affecting 11,273 individuals

Impact and Risk Assessment

For Affected Individuals

11,273 patients had their dental health data exposed, potentially including treatment records and insurance information.

For Organisations

Small dental practices face proportionally significant operational and financial impact from ransomware attacks.

Regulatory Context

HIPAA breach notification requirements apply regardless of practice size.

What Should You Do?

If You Are a Potentially Affected Individual

If you are a patient of 360 Dental PC, monitor your explanation of benefits for signs of medical identity fraud.

If You Are a Security or Risk Professional

Dental practices should prioritise endpoint detection, network segmentation, and tested backup procedures. Consider managed security services if in-house expertise is limited.

Learnings and Recommendations

Dental practices continue to be targeted by ransomware. Prioritising endpoint detection, network segmentation, and tested backup procedures is essential for healthcare providers of all sizes.

Sources

    This advisory is provided for informational purposes by the Scrutex.ai research team. It is based on publicly available reporting from the sources cited above. Where details are unconfirmed or disputed, we have noted this accordingly. Scrutex.ai does not independently verify internal claims made by affected organisations. Organisations concerned about their own exposure are encouraged to conduct their own assessments and seek professional advice where needed.

    Stay ahead of the next breach

    Scrutex monitors dark web sources, breach databases, and threat actor activity continuously, detecting exposure that affects your organisation before it becomes a headline.