Cure Dental Data Breach Exposes Personal Information of 878 Patients
Cure Dental, a Belton, Texas-based dental practice, disclosed a data breach affecting 878 individuals in the U.S. The incident was first detected on June 25, 2025, and reported to the U.S. Department of Health and Human Services (HHS) on June 23, 2026. A patient notice was later posted on the practice’s website.
The breach was identified after Cure Dental’s cybersecurity platform detected and halted malicious activity within its network, prompting restrictions on its patient record system. An investigation revealed that unauthorized access may have exposed personally identifiable information (PII), including names, addresses, dates of birth, Social Security numbers, and driver’s license numbers. The practice confirmed that protected health information (PHI) was not compromised.
On August 10, 2025, the ransomware group ThreeAM claimed responsibility for the attack, posting on the Tor network to assert they had obtained data from the practice.
In response, Cure Dental advised affected individuals to monitor their credit reports for signs of fraud and provided contact details for the three major credit bureaus. The practice also offered a dedicated phone line (866-766-1481) for inquiries related to the breach.
Source: https://www.claimdepot.com/data-breach/cure-dental-2026
Cure Dental Clinic & Maxillofacial Surgery Centre cybersecurity rating report: https://www.rankiteo.com/company/cure-dental-clinic-maxillofacial-surgery-centre
"id": "CUR1784917566",
"linkid": "cure-dental-clinic-maxillofacial-surgery-centre",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '878',
'industry': 'Healthcare',
'location': 'Belton, Texas, USA',
'name': 'Cure Dental',
'type': 'Dental Practice'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Monitor credit reports, contact credit bureaus if '
'fraud is suspected',
'data_breach': {'data_exfiltration': 'Possible',
'number_of_records_exposed': '878',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of Birth',
'Social Security '
'Numbers',
'Driver’s License '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2025-06-25',
'date_publicly_disclosed': '2026-06-23',
'description': 'Cure Dental, a Belton, Texas-based dental practice, disclosed '
'a data breach affecting 878 individuals in the U.S. The '
'breach was identified after unauthorized access may have '
'exposed personally identifiable information (PII), including '
'names, addresses, dates of birth, Social Security numbers, '
'and driver’s license numbers. The ransomware group ThreeAM '
'claimed responsibility for the attack.',
'impact': {'data_compromised': 'Personally identifiable information (PII)',
'identity_theft_risk': 'High',
'operational_impact': 'Restrictions on patient record system',
'systems_affected': 'Patient record system'},
'investigation_status': 'Ongoing',
'motivation': 'Data Exfiltration',
'ransomware': {'data_exfiltration': 'Claimed', 'ransomware_strain': 'ThreeAM'},
'recommendations': 'Affected individuals advised to monitor credit reports '
'for signs of fraud',
'references': [{'source': 'Cure Dental Website'},
{'date_accessed': '2025-08-10',
'source': 'ThreeAM Ransomware Group (Tor Network)'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA'],
'regulatory_notifications': 'Reported to U.S. '
'Department of Health '
'and Human Services '
'(HHS)'},
'response': {'communication_strategy': 'Patient notice posted on website, '
'dedicated phone line provided',
'containment_measures': 'Restricted access to patient record '
'system'},
'threat_actor': 'ThreeAM',
'title': 'Cure Dental Data Breach Exposes Personal Information of 878 '
'Patients',
'type': 'Data Breach'}