Skip to content
Ransomware

Mansfield Family Dentistry listed on Everest ransomware leak site

The threat group known as Everest claims to have leaked 684 GB of data allegedly belonging to Mansfield Family Dentistry.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Everest
  • Country: United States
  • Sector: Healthcare
  • Announcement date: August 5, 2026

Everest claims data breach at Mansfield Family Dentistry

The threat actor group known as Everest has officially listed Mansfield Family Dentistry on its dedicated leak site. According to the announcement made on August 5, 2026, the group claims to have successfully compromised the organization's network and exfiltrated a significant amount of sensitive information. The group asserts that the breach occurred around July 23, 2026, and they have threatened to publish the stolen data if the organization fails to establish contact with them.

This incident follows a pattern common in modern cyberattacks known as double extortion. In these scenarios, threat actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak confidential information on a public forum, the attackers aim to pressure the organization into paying a ransom to prevent the exposure of private records, which could lead to severe reputational and legal consequences.

Details of the alleged data exfiltration

The Everest group claims to have obtained a database totaling 684 GB from the institution's network. While the specific file count has not been disclosed, the volume of data suggests a substantial breach of the organization's digital infrastructure. The attackers have indicated that the data is ready for publication should their demands not be met.

Based on the information provided by the threat actors, the allegedly compromised data includes a wide variety of sensitive files. The stolen information reportedly consists of:

  • Patient records
  • Dental imaging
  • Payroll data
  • Insurance information
  • Backup files

The inclusion of such diverse data types, ranging from clinical imaging to financial payroll folders and insurance materials, highlights the high-value nature of the target. The presence of Outlook PDF files, office documents, and software support files in the leak further expands the scope of the potential exposure.

About Mansfield Family Dentistry

Mansfield Family Dentistry is a dental clinic located in Mansfield, Texas, United States. The facility provides a variety of dental services to its community, including general dentistry, preventive care, and cosmetic dental treatments.

Potential impact and sector implications

This incident underscores the significant risks faced by the healthcare sector, where the presence of personal health information (PHI) makes organizations prime targets for extortion. Because the organization is based in the United States, this breach may trigger specific legal obligations. Under the Health Insurance Portability and Accountability Act (HIPAA) regulations, the organization may be subject to mandatory data breach notification requirements and various legal processes.

The exposure of such sensitive information poses secondary risks to the affected individuals. The theft of patient records and insurance information can lead to serious issues such as identity theft and fraud. For the organization, the breach may impact operational continuity and compromise patient privacy, potentially leading to long-term damage to the clinic's reputation.

To defend against such threats, organizations in the healthcare sector typically focus on robust security measures. This includes implementing strong access controls, maintaining regular offline backups, and employing continuous monitoring to detect unauthorized data exfiltration. Given that the Everest group has been active since 2020 and is known for utilizing data exfiltration and extortion tactics, healthcare providers must remain vigilant against these evolving methodologies.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories