Creative Smiles Pediatric Dentistry
- Gruppe
- CRPxO
- Erfassungsdatum
- Status
- Online / unverändert
Hinweise zur Einordnung
Dieser Eintrag dokumentiert eine Veröffentlichung der Gruppe. Ein Angriff oder Datenabfluss ist damit nicht unabhängig bestätigt.
- Land: nicht verfügbar
- Branche: nicht verfügbar
Konfidenz ist eine heuristische Einschätzung. Prüfzeitpunkte beziehen sich auf die Anreicherung, nicht auf unabhängige Verifikation. Herkunft und Korrekturen finden Sie unter „Firmeninformationen & Datenherkunft“.
Angaben der Ransomware-Gruppe
UnbestätigtQuellentext als öffentliche Metadaten wiedergegeben. Die Aussagen wurden nicht unabhängig geprüft; Links sind ausgeblendet.
Creative Smiles Pediatric Dentistry is a pediatric dental practice located in Prosper, Texas, operated by Dr. Nejay Ananaba. The practice specializes in children's dentistry and patients with special needs.
We have successfully exfiltrated 2.51 GB of sensitive data from their primary workstation in New York, including:
PATIENT DATA (PHI)
Pediatric patient X-rays and clinical images
Treatment narratives with patient names, dates of service, and medical histories
Patient PHI stored unencrypted on Desktop and Downloads folders
Referral letters and treatment plans
FINANCIAL & BILLING DATA
Complete Accounts Receivable (AR) reports
Bank deposit slips and payment records
Insurance claims and pre-determination documents
Fee schedules and financial templates
Explanation of Benefits (EOBs) from Aetna, Liberty, Guardian, Mutual of Omaha
CRITICAL SECURITY DATA
Plain-text business and insurance portal logins
Password Excel files (Clintonville Dental Group [Link entfernt], ins [Link entfernt])
Provider NPI numbers and credentialing information
COMPLIANCE VIOLATIONS
Unlicensed software (torrented/cracked) on workstation
PHI stored on Desktop and Downloads folders
No data classification or access controls
This data is currently stored on our secure servers. Creative Smiles Pediatric Dentistry has been notified and given an opportunity to resolve this matter privately.
If no agreement is reached by the deadline:
All patient data will be published on our dark web leak site
HIPAA violations will be reported to the Office for Civil Rights (OCR)
Insurance carriers will be notified of the data exposure
Financial records will be made public
The practice's unsecured data storage and use of unlicensed software demonstrate a pattern of security negligence that puts pediatric patients at risk.
Deadline: June 27, 2026 – 16:00 EST
Contact us via Tox or Session for removal or negotiation.
