Garrett Taylor, Dds targeted by Sinobi ransomware group

• Ransomware group: Sinobi
• Country: United States
• Sector: Healthcare
• Announcement date: December 2, 2025

The threat actor known as Sinobi has claimed to have compromised data belonging to Garrett Taylor, Dds. The group has officially listed the healthcare entity on their dedicated leak site, signaling a potential data breach and extortion attempt.

Details of the claimed attack

According to the announcement made on December 2, 2025, the Sinobi group claims to have successfully executed a ransomware attack against the organization. The threat actors assert that the organization's systems have been encrypted, effectively locking the entity out of its own digital environment. To support these claims, the group has shared screenshots that purportedly show the organization's server files.

Following the encryption of the systems, the group issued a ransom demand of $5,000,000. While the group has taken responsibility for the incident, public information regarding the specific tactics, techniques, and procedures used by Sinobi remains limited. This lack of detailed intelligence is common with emerging or less-documented ransomware groups that operate in the shadows of the dark web.

Data involved in the incident

The full scope of the leaked data has not been specified by the threat actor. However, the screenshots provided by the group to support their claims contain file directories and system configurations belonging to a Windows Server 2019 environment. The listing does not name any specific data types that have been exfiltrated.

About Garrett Taylor, Dds

Taylor & Carter Family Dentistry is a dental clinic located in Pine Bluff, Arkansas. Led by Dr. Garrett Taylor, Dr. Hannah Carter, and Dr. Rontae Graham, the practice provides general, cosmetic, and restorative dental services to its patient base.

Impact assessment and sector risks

Given that the organization operates in the healthcare sector, a potential data breach may pose significant risks regarding patient privacy under HIPAA regulations. The exposure of personal health information can lead to secondary risks for patients, such as identity theft and targeted phishing attacks. Furthermore, the encryption of systems suggests that the organization's operational continuity may have been disrupted.

The high ransom demand of $5,000,000 may indicate that the threat actor is specifically targeting the organization's financial capacity. If the threat actor follows the common pattern of double extortion—where data is both encrypted and stolen—the potential publication of the data could lead to severe reputational damage and legal consequences for the organization.

In such scenarios, organizations in the healthcare sector often face the challenge of balancing patient care with digital recovery. Common defensive steps for organizations include maintaining offline backups, implementing multi-factor authentication, and ensuring robust encryption for data at rest and in transit. Such measures are critical for mitigating the impact of ransomware and protecting sensitive patient information from unauthorized access.