Bishop Arts Dental PLLC targeted by CRPxO ransomware group

• Ransomware group: CRPxO
• Country: United States
• Sector: Healthcare
• Announcement date: July 9, 2026

CRPxO claims data leak at Bishop Arts Dental PLLC

The ransomware group known as CRPxO has announced a data breach involving Bishop Arts Dental PLLC. According to a post made on a leak site on July 9, 2026, the threat actors claim that approximately 24.6 GB of data belonging to the organization has been exfiltrated and leaked.

In typical double extortion ransomware attacks, threat actors not only encrypt an organization's systems but also steal sensitive information to use as leverage. By threatening to release this stolen data on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information. This tactic increases the pressure on organizations, as the release of data can lead to significant regulatory, legal, and reputational consequences.

Details of the alleged breach

The threat actor claims that the organization's data is currently stored on their own servers. The group stated that the company has been notified of the incident and was allegedly offered an opportunity to resolve the matter. However, the announcement, which was posted claiming the data has already been leaked, suggests that the attackers intended to make the information available for public download if their demands were not met.

The group provided screenshots to support their claims, asserting that the leaked information includes a wide variety of sensitive files. The data allegedly stolen includes various types of records, such as patient files, employee information, personal data belonging to the owner, and financial compliance documentation. The specific types of data mentioned in the claim include:

• Patient X-ray and dental photos
• Patient medical history
• Signatures
• HIPAA compliant forms
• Employee payroll records
• SSNs
• Employee HR data
• Owner personal data
• Bank account statements
• Tax return documents
• Financial compliance data

About Bishop Arts Dental PLLC

Bishop Arts Dental is a dental clinic located in Dallas, Texas. The facility provides a range of oral health services, including general dentistry, cosmetic dentistry, and preventive oral health services.

Potential risks and implications

The nature of the data claimed to be leaked poses various risks to both the organization and the individuals involved. The exposure of sensitive health data and highly sensitive personal identifiers, such as Social Security Numbers (SSNs), significantly increases the risk of targeted phishing campaigns and identity theft. When such information is available to malicious actors, they can craft highly convincing messages to deceive victims or use the data to impersonate them for financial gain.

Furthermore, because Bishop Arts Dental is a US-based healthcare provider, this incident may lead to significant issues regarding HIPAA compliance. The Health Insurance Portability and Accountability Act (HIPAA) mandates strict protections for patient health information, and breaches involving such data often trigger regulatory scrutiny and legal obligations. Additionally, the claim of a data leak may lead to secondary attack risks for the organization, as stolen information can be used to facilitate further unauthorized access or social engineering attempts.

To defend against such threats, organizations in the healthcare sector often implement defensive measures such as multi-factor authentication, regular security awareness training, and robust encryption for data at rest and in transit. Maintaining strict access controls and monitoring network traffic for unusual data exfiltration patterns are also common practices used to mitigate the impact of ransomware and data theft.