Elko Dental Specialists targeted by CRPxO ransomware group

• Ransomware group: CRPxO
• Country: United States
• Sector: Healthcare
• Announcement date: July 27, 2026

CRPxO claims data exfiltration from Elko Dental Specialists

The threat actor group known as CRPxO has announced a significant data breach involving Elko Dental Specialists. According to an announcement made on a leak site on July 27, 2026, the group claims to have successfully infiltrated the network of the healthcare provider. The threat actor group asserts that they have exfiltrated 7.8 GB of sensitive data from the organization's systems.

The incident was reported on the same day the group claims the attack occurred. The group has employed double extortion tactics, a method where attackers not only encrypt an organization's data but also steal sensitive information to use as leverage. In this specific case, the threat actor has stated that if the institution does not meet their ransom demands, the stolen data will be published on their dedicated leak site. While the group has made these claims, information regarding the specific identity and background of the CRPxO group remains limited.

Details of the alleged data breach

The scope of the alleged data theft is extensive, involving a wide variety of sensitive information that could impact both patients and staff. The data claimed to be stolen includes highly personal and protected information. The contents of the alleged breach include the following:

• Patient names
• Dates of birth
• Social security numbers (SSNs)
• Addresses
• Pediatric patient records
• Digital X-rays
• Orthodontic treatment plans
• Surgical consent forms
• Clinical notes
• Insurance claim information
• Employee contracts and certifications

The nature of this information suggests that the breach encompasses several critical categories of data. Specifically, the listing identifies the affected data as including patient health records, employee HR data, financial data, and personally identifiable information (PII).

Organization profile

Elko Dental Specialists is a dental healthcare clinic located in Elko, Nevada. They provide general dentistry services and various specialized dental treatments to their patient base.

Impact and assessment of the incident

Given the sensitive nature of the alleged data, there are significant concerns regarding the potential consequences for the affected individuals. The exposure of such information, particularly social security numbers, addresses, and medical records, means that patients may face heightened risks of identity theft and fraud. The inclusion of pediatric records and surgical consent forms further highlights the sensitive nature of the information involved.

For the institution, the consequences of such a breach can be multifaceted. The exposure of health data could lead to legal and administrative sanctions under HIPAA regulations in the United States. Furthermore, the potential publication of employee contracts and financial information may undermine the institution's operational security and damage its professional reputation. The use of double extortion by CRPxO is a clear attempt to exert maximum pressure on the organization to fulfill ransom demands.

In such scenarios, organizations are often required to fulfill data breach notification obligations and inform the affected individuals to mitigate harm. While the specific ransom demand has not been disclosed, the threat of public disclosure remains a primary driver for the attackers. For healthcare organizations, maintaining robust cybersecurity posture and adhering to regulatory compliance is essential to prevent such high-impact incidents that threaten both patient privacy and institutional integrity.