Kashi Dental Data Breach Exposes Personal and Health Information of Over 6,000 Texas Residents
In July 2026, Kashi Dental a family-focused dental practice in Converse, Texas disclosed a ransomware attack that compromised the personal and health data of 6,027 Texas residents. The breach was part of a larger incident affecting Soniva Dental Care, which impacted at least 30,000 individuals across the state.
The attack was detected on May 26, 2026, when Kashi Dental’s IT support team identified irregularities in remote access session hosts. Within minutes, the practice confirmed a ransomware incident and took immediate containment steps, including locking down external access, disabling remote desktop accounts, and forcing an office-wide password reset. While the patient record platform was later restored, archive data remained unaffected.
An investigation revealed that unauthorized access may have exposed personally identifiable information (PII), including names, addresses, dates of birth, driver’s license numbers, and government-issued ID numbers. Additionally, protected health information (PHI), such as medical records and health insurance details, was potentially compromised. Payment information and dental care records were not impacted.
Kashi Dental began notifying affected individuals in July 2026 and posted a public notice outlining the breach. As part of its response, the practice offered complimentary identity protection monitoring services to impacted patients, with a dedicated support line for inquiries.
Source: https://www.claimdepot.com/data-breach/kashi-dental-2026
Kashi Smiles Dental Clinic and implant centre cybersecurity rating report: https://www.rankiteo.com/company/kashi-smiles-dental-clinic-and-implant-centre
Soniva Dental Care cybersecurity rating report: https://www.rankiteo.com/company/soniva-dental-care
"id": "KASSON1785343172",
"linkid": "kashi-smiles-dental-clinic-and-implant-centre, soniva-dental-care",
"type": "Ransomware",
"date": "5/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '6027',
'industry': 'Healthcare',
'location': 'Converse, Texas',
'name': 'Kashi Dental',
'type': 'Dental Practice'},
{'customers_affected': '30000',
'industry': 'Healthcare',
'location': 'Texas',
'name': 'Soniva Dental Care',
'type': 'Dental Care Provider'}],
'attack_vector': 'Remote access session hosts',
'customer_advisories': 'Complimentary identity protection monitoring services '
'offered, dedicated support line for inquiries',
'data_breach': {'data_encryption': 'Yes (ransomware)',
'number_of_records_exposed': '6027 (Kashi Dental), 30000 '
'(Soniva Dental Care)',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of birth',
'Driver’s license '
'numbers',
'Government-issued ID '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2026-05-26',
'date_publicly_disclosed': '2026-07',
'description': 'In July 2026, Kashi Dental, a family-focused dental practice '
'in Converse, Texas, disclosed a ransomware attack that '
'compromised the personal and health data of 6,027 Texas '
'residents. The breach was part of a larger incident affecting '
'Soniva Dental Care, which impacted at least 30,000 '
'individuals across the state.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'operational_impact': 'Lockdown of external access, disabled '
'remote desktop accounts, forced password '
'reset',
'payment_information_risk': 'None',
'systems_affected': 'Patient record platform, remote access '
'session hosts'},
'initial_access_broker': {'entry_point': 'Remote access session hosts'},
'investigation_status': 'Completed',
'post_incident_analysis': {'corrective_actions': 'Lockdown of external '
'access, disabled remote '
'desktop accounts, forced '
'password reset, restoration '
'of patient record platform',
'root_causes': 'Irregularities in remote access '
'session hosts'},
'ransomware': {'data_encryption': 'Yes'},
'references': [{'source': 'Public notice by Kashi Dental'}],
'response': {'communication_strategy': 'Public notice, notification to '
'affected individuals',
'containment_measures': 'Locked down external access, disabled '
'remote desktop accounts, forced '
'password reset',
'incident_response_plan_activated': 'Yes',
'remediation_measures': 'Restored patient record platform'},
'title': 'Kashi Dental Data Breach Exposes Personal and Health Information of '
'Over 6,000 Texas Residents',
'type': 'Ransomware'}