Sonrisas Dental Health (Sonrisas) has learned of a cyber extortion incident that may have impacted data belonging to certain employees and patients.
On March 4, 2025, Sonrisas became aware of unusual activity in their digital environment. Upon identifying this activity, they promptly took steps to secure their digital environment and investigate. They also engaged independent cybersecurity specialists to assist with this investigation. As a result of this investigation, on March 14, 2025, they learned that an unauthorized actor potentially acquired certain files and data within their systems.
While Sonrisas have no evidence that any information potentially involved in this incident has been misused, out of an abundance of caution, they are informing affected individuals about the steps they can take to help protect their information. Although their review of the impacted information is ongoing, it is expected that the potentially affected information varies by individual and may include name, driver’s license number, Social Security number, date of birth and protected health information, such as dental images.
Sonrisas have taken steps in response to this incident and have made alterations to its cyber environment to help prevent similar incidents from occurring in the future.