Maryann Kriger Listed by INC Ransom Ransomware Group

The group operating the INC Ransom leak site has listed Bonita Orthodontics on its public disclosures page. According to the listing, the orthodontic practice’s patient records are involved. The company has not publicly confirmed the claim as of this writing.

If patient records were taken, this would primarily concern the private health and identity information of minors. Records involving children carry heightened sensitivity that does not diminish over time, even years after any potential incident.

What a Leak-Site Listing Actually Establishes

INC Ransom, like many ransomware-extortion groups, publishes names of organizations on leak sites to pressure them into payment. These listings are produced by the attackers themselves. They frequently contain unverified claims, recycled data from earlier incidents, exaggerated descriptions, or in some cases entirely fabricated entries intended to damage reputation.

A listing alone does not constitute evidence that a breach occurred, that any specific data was allegedly stolen, or that the organization’s systems were compromised in the manner described. Real confirmation would require an independent investigation, a statement from the affected organization, regulatory notification, or forensic findings that can be examined by third parties. Until then, the record remains an unproven accusation.

The Pattern Seen With Small Orthodontic and Pediatric Practices

Ransomware groups have repeatedly targeted smaller healthcare providers, particularly those serving children and teenagers. Patient records involving minors are often highlighted in their marketing because the long-term sensitivity of pediatric health data increases pressure on families and the practice. This tactic appears across multiple extortion crews but does not reveal whether any particular listing is genuine. It does mean that anyone connected to these types of practices should treat future similar claims with the same measured skepticism while remaining prepared to act if confirmation appears.

What You Can Still Control

Absence of a direct notification letter from the practice usually indicates your records were not included, but letters can be delayed or sent to outdated addresses. Because this filing does not state when any incident may have occurred, the safest check remains contacting Bonita Orthodontics directly if you have ever been a patient or guardian there and have changed addresses in recent years.

Monitor statements and explanation of benefits forms for any unfamiliar activity. Consider placing a fraud alert with the major credit bureaus as a low-effort precaution. If you maintain an online patient portal account with the practice, changing that password is a low-cost step worth taking even though no credential exposure is confirmed in the record.

GalaxyWarden provides continuous monitoring across 13.1B+ breach records and 100+ platforms with identity-chain mapping and remediation support by specialists.