iDentalSoft listed on termite ransomware leak site

• Ransomware group: termite
• Country: Brazil
• Sector: Healthcare
• Announcement date: October 9, 2026

Healthcare software company iDentalSoft listed by termite ransomware group

The healthcare software company iDentalSoft has been listed on the leak site of the ransomware group known as termite. According to the announcement, the group claims to have compromised the company's systems, leading to a significant data exfiltration event.

Details of the alleged attack

The termite group listed iDentalSoft on their leak site on October 9, 2026, claiming to have successfully breached the organization's infrastructure. The group alleges that they have exfiltrated approximately 15 GB of data during the incident. While the group has made these claims publicly on their platform, information regarding this specific group remains limited in the public domain.

Ransomware attacks of this nature often involve a technique known as double extortion. In such scenarios, threat actors do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information before the encryption process begins. By threatening to leak this stolen data on a public leak site, the attackers attempt to pressure the victim into paying a ransom to prevent the exposure of confidential information. This method increases the leverage held by the cybercriminals, as the threat of reputational damage and legal consequences often outweighs the immediate operational impact of system downtime.

Scope of the claimed data exfiltration

The leak announcement specifies a wide range of sensitive information that has allegedly been compromised. The data mentioned in the listing includes various clinical, administrative, and technical files that could impact both patients and the company's infrastructure. The specific types of data identified in the claim include:

• Clinical assessment records
• Treatment history
• Identification documents
• Audio recordings
• Database dumps
• Infrastructure and system credentials

The presence of such diverse data types suggests a deep level of access to the organization's internal systems. When attackers gain access to database dumps and system credentials, they often gain a comprehensive view of the organization's digital environment, which can be used to facilitate further malicious activities or to maximize the impact of the initial breach.

The profile of iDentalSoft

iDentalSoft is a technology company that provides cloud-based practice management software for dental clinics. The platform aims to increase the efficiency of dental practices with features such as smart scheduling, clinical charting, and patient communication tools.

Risk assessment and industry implications

The alleged data exfiltration poses a significant risk to patient privacy and the confidentiality of sensitive health information. Given the company's location in Brazil, the incident may lead to regulatory scrutiny under the LGPD (General Data Protection Law). The exposure of such sensitive medical and personal data can have long-lasting consequences for the individuals involved, including potential identity theft and targeted phishing attacks.

Furthermore, the inclusion of API keys and system credentials in the leaked data could potentially compromise the supply chain and facilitate secondary attacks. When a software provider that manages services for many different clients is breached, the risk extends beyond the single organization to its entire user base. This