Alphalocker ransomware group lists www.myriversidedentaloffice.com on its leak site

• Ransomware group: Alphalocker
• Country: United States
• Sector: Healthcare
• Announcement date: November 3, 2025

The Alphalocker ransomware group has claimed responsibility for a data breach involving the healthcare provider My Riverside Dental Office. According to an announcement posted on the group's leak site, the attackers claim to have exfiltrated sensitive information belonging to the organization and are threatening to release the stolen data publicly.

Details of the alleged attack

The Alphalocker group listed My Riverside Dental Office on their dedicated leak site on November 3, 2025. Through this announcement, the group asserts that they have successfully obtained the institution's digital assets. This type of activity is a hallmark of modern ransomware operations, often referred to as double extortion. In these scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to publish the stolen information on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential records.

The announcement made by the group includes various file directories and lists of names that are allegedly part of the institution's digital assets. Based on the information provided by the group, the leaked content appears to include several types of sensitive administrative and personal information. The screenshots associated with the claim show various folder structures that suggest a wide-reaching access to the organization's internal files.

Potentially affected data types

The listing identifies several categories of data that have allegedly been compromised during the attack. These include:

• Patient records
• Email attachments
• Database logs
• Forms

About My Riverside Dental Office

My Riverside Dental Office is a dental practice focused on designing aesthetic and long-lasting smiles using conservative and modern dentistry procedures. As a healthcare provider, the organization handles sensitive information related to patient care and clinical procedures.

Implications and industry considerations

The alleged leak poses a significant risk to patient privacy for the healthcare institution. Because the entity is based in the United States, the exposure of such sensitive data could lead to legal sanctions and administrative fines under HIPAA regulations. Such regulatory frameworks are designed to ensure the protection of sensitive patient health information, and breaches can result in heavy penalties for non-compliance.

Beyond the regulatory and legal consequences, the leaked information may expose patients to various secondary risks, such as identity theft or targeted phishing attacks. When personal details and medical-related information are leaked, attackers often use them to craft highly convincing social engineering campaigns to defraud individuals.

While public information regarding the Alphalocker group remains limited, their methods suggest a strategic approach intended to maximize pressure on institutions to pay ransoms. For organizations operating within the healthcare sector, such incidents highlight the critical importance of robust cybersecurity defenses. Common defensive strategies often include maintaining rigorous backup protocols, implementing multi-factor authentication, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors. Furthermore, in the event of a confirmed breach, organizations may be required to fulfill data breach notification obligations and inform all affected parties to mitigate the impact on individuals.