SF Smile Doctor
- Gruppe
- CRPxO
- Erfassungsdatum
- Status
- Online / unverändert
Hinweise zur Einordnung
Dieser Eintrag dokumentiert eine Veröffentlichung der Gruppe. Ein Angriff oder Datenabfluss ist damit nicht unabhängig bestätigt.
- Land: nicht verfügbar
- Branche: nicht verfügbar
Konfidenz ist eine heuristische Einschätzung. Prüfzeitpunkte beziehen sich auf die Anreicherung, nicht auf unabhängige Verifikation. Herkunft und Korrekturen finden Sie unter „Firmeninformationen & Datenherkunft“.
Angaben der Ransomware-Gruppe
UnbestätigtQuellentext als öffentliche Metadaten wiedergegeben. Die Aussagen wurden nicht unabhängig geprüft; Links sind ausgeblendet.
SF Smile Doctor (Sassan Kafayi, DDS ) is a dental practice located in San Francisco, California, operated by Dr. Sassan Kafayi. The practice has failed to implement basic security measures to protect patient data.
We have successfully exfiltrated approximately 100 GB of sensitive data from their primary systems, including:
PATIENT DATABASE & CLINICAL RECORDS
Complete patient database (names, addresses, SSNs, medical histories)
Panoramic X-rays and endodontic referral forms
Patient insurance appeals and clinical narratives
Signed consent forms and treatment plans
FINANCIAL DATA
2019 Profit & Loss Statement showing $654,336 in annual revenue
Financial ledgers and transaction logs
Insurance claims and reimbursement records
Bank statements and expense reports
PRACTICE DOCUMENTS
Internal correspondence and referral letters
Insurance appeals to Liberty Dental Plan of California
Patient clinical referrals with detailed medical information
As proof of possession, we have obtained and verified the following documents:
2019 P & L [Link entfernt] – Practice Profit & Loss statement
pt Pak Leung [Link entfernt] – Patient insurance appeal with clinical details
pt Solmaz Davis #31 ENDO [Link entfernt] – Endodontic referral with patient information
This data is currently stored on our secure servers. We have not encrypted your systems – yet.
If no agreement is reached by the deadline, ALL exfiltrated data will be:
1. Published on our dark web leak site for public download
2. Reported to HHS Office for Civil Rights (OCR) for HIPAA violations
3. Reported to the California Attorney General under CCPA/CPRA
4. Sent directly to your patients via email and postal mail
5. Shared with local media and dental associations
FINANCIAL CONSEQUENCES OF A DATA LEAK
For a practice of your size, the total financial impact typically exceeds $500,000:
HIPAA breach notification: $10,000 - $100,000+
HHS OCR fines: Up to $50,000 per violation ($1.5M annual maximum)
CCPA violations: $2,500 per intentional violation
Patient lawsuits: $200,000 - $500,000 average settlement
Patient loss: 40% of patients leave after a data breach
Insurance premium increases: 50-300% higher cyber liability premiums
State dental board review: Potential license impact
The cost of resolution is a fraction of these consequences.
Contact us immediately via the secure channels provided in our previous communication.
Deadline: June 18, 2026 – 16:00 EST
