ClearCare Periodontal & Implant Centre targeted by Qilin ransomware group

• Ransomware group: Qilin
• Country: Canada
• Sector: Healthcare
• Announcement date: October 24, 2025

Qilin ransomware group claims data breach at ClearCare Periodontal & Implant Centre

The Qilin ransomware group has claimed responsibility for a cyberattack targeting ClearCare Periodontal & Implant Centre. According to an announcement posted on the group's leak site on October 24, 2025, the threat actor alleges that they have successfully compromised sensitive information belonging to the organization.

Details of the alleged attack

The threat actor known as Qilin announced in a post on October 24, 2025, that it has targeted ClearCare Periodontal & Implant Centre. The group alleges that critical data belonging to customers and employees was compromised during an incident stated to have occurred on October 22, 2025. The threat actor claims that the organization ignored ransom demands, leading to the listing of the data on their leak site.

Ransomware attacks often involve a process where attackers gain unauthorized access to a network to encrypt files or exfiltrate data. In many modern cases, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not merely lock the victim's systems but also steal sensitive data, threatening to publish it on a public leak site if the ransom is not paid. This increases the pressure on the victim, as the threat of public exposure can lead to significant reputational and legal consequences.

Data involved in the leak

The leaked data is said to include information regarding customers and employees. The provided screenshot displays various document samples related to the organization's operations. The specific types of data affected include:

• Customer data
• Employee data

While the specific volume of the data or the exact file count has not been disclosed, the presence of document samples suggests that the breach involves operational files used by the organization.

Organization profile

ClearCare Periodontal & Implant Centre is a specialized dental clinic located in Winnipeg, Canada, providing periodontal treatment and dental implant services.

Potential impact and industry implications

This incident may increase the risk of identity theft and fraud for the customers and employees of the Canada-based organization. As the entity operates in the healthcare sector, the potential exposure of personal health information could lead to legal consequences under regulations such as PIPEDA. The use of double extortion by the Qilin group may result in significant reputational damage and expose the organization to targeted phishing campaigns.

The refusal to meet ransom demands may lead to the permanent exposure of the data, potentially facilitating further exploitation by secondary threat actors. When data is leaked publicly, it often becomes a resource for other criminals who may use the information for social engineering or further fraudulent activities.

Organizations in the healthcare sector can take several defensive steps to mitigate such risks. Implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training are common practices. Furthermore, ensuring compliance with regional data protection regulations and maintaining a clear incident response plan can help organizations manage the fallout of a potential breach and protect the privacy of their patients and staff.