Wilson Dental Suffers Ransomware Attack, Exposing Sensitive Data of 3,476 Texans
In late May 2026, Wilson Dental a multi-location dental practice under the Soniva Dental Care network experienced a data breach following a ransomware attack. The incident targeted the company’s remote desktop web services infrastructure, with IT teams detecting irregularities in remote access sessions before confirming the breach.
The exposed data includes sensitive personally identifiable information (PII) such as names, addresses, driver’s license numbers, government-issued IDs, medical records, health insurance details, and dates of birth. A total of 3,476 Texas patients associated with Wilson Dental were affected.
Wilson Dental, founded in 1914, operates several offices in Texas and is part of Soniva Dental Care, a larger group with 14 locations nationwide. The firm is now under investigation by Shamis & Gentile P.A., a class action law firm specializing in data breach cases, as affected individuals may be eligible for compensation.
Source: https://www.claimdepot.com/investigations/wilson-dental-data-breach-2026
Wilson Dental cybersecurity rating report: https://www.rankiteo.com/company/wilson-dental
Soniva Dental Care cybersecurity rating report: https://www.rankiteo.com/company/soniva-dental-care
"id": "WILSON1785364310",
"linkid": "wilson-dental, soniva-dental-care",
"type": "Ransomware",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '3476',
'industry': 'Healthcare',
'location': 'Texas, USA',
'name': 'Wilson Dental',
'type': 'Dental Practice'}],
'attack_vector': 'Remote Desktop Protocol (RDP)',
'data_breach': {'number_of_records_exposed': '3476',
'personally_identifiable_information': 'Names, addresses, '
'driver’s license '
'numbers, '
'government-issued '
'IDs, dates of birth',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII), Medical '
'Records, Health Insurance '
'Details'},
'date_detected': '2026-05',
'description': 'In late May 2026, Wilson Dental, a multi-location dental '
'practice under the Soniva Dental Care network, experienced a '
'data breach following a ransomware attack. The incident '
'targeted the company’s remote desktop web services '
'infrastructure, with IT teams detecting irregularities in '
'remote access sessions before confirming the breach. The '
'exposed data includes sensitive personally identifiable '
'information (PII) such as names, addresses, driver’s license '
'numbers, government-issued IDs, medical records, health '
'insurance details, and dates of birth. A total of 3,476 Texas '
'patients associated with Wilson Dental were affected.',
'impact': {'data_compromised': 'Sensitive personally identifiable information '
'(PII) including names, addresses, driver’s '
'license numbers, government-issued IDs, '
'medical records, health insurance details, '
'and dates of birth',
'identity_theft_risk': 'High',
'legal_liabilities': 'Under investigation by Shamis & Gentile P.A. '
'for potential class action',
'systems_affected': 'Remote desktop web services infrastructure'},
'initial_access_broker': {'entry_point': 'Remote desktop web services '
'infrastructure'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.'},
'title': 'Wilson Dental Suffers Ransomware Attack, Exposing Sensitive Data of '
'3,476 Texans',
'type': 'Ransomware'}