SmilePoint Dental Group Listed by spacebears Ransomware Group

On April 14, 2026, SmilePoint Dental Group appeared on the leak site of the spacebears ransomware group. The Texas- and New Mexico-based dental organization, which operates 26–28 offices under brands including Crosby Family Dental, Liberty Family Dental, and Jasper Family Dental, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates the stolen data includes a patient database containing social security numbers and medical histories as well as access to the local EagleSoft database.

What's Publicly Reported from Reporting

SmilePoint provides general dentistry, orthodontics, cosmetic care, implants, and preventive treatments to families in smaller communities. The ransomware group posted proof of the breach on its onion site, listing the company and samples of the allegedly stolen material. Available reporting describes the exposed information as sensitive patient records and internal system access credentials. No exact victim count has been released, but the organization serves thousands of patients across its network of clinics. The incident follows the group’s typical pattern of exfiltrating data before encrypting systems and then publicly pressuring victims.

Why This Matters for You and Your Family

If you or your children have received dental care at any SmilePoint, Crosby Family Dental, Liberty Family Dental, or Jasper Family Dental location in Texas or New Mexico, your social security numbers, medical histories, and personal details may now be in criminal hands. Dental offices collect the same identifying information as hospitals, yet many families assume these records are safer than those at larger health systems. Once stolen, this data can be sold, combined with other leaks, and used to file fraudulent tax returns, open accounts in your name, or target your family with phishing and identity theft schemes. The breach affects not only adult patients but also minors whose records were stored in the same databases.

The Doxxing and Identity-Chain Implications

Credential leaks from healthcare providers rarely stay isolated. A single exposed email, phone number, or password from the EagleSoft system can be linked to your accounts on other platforms. Attackers use these connections to build detailed profiles, mapping your online handles to real-world identity. This chain often leads to doxxing, account takeovers, and harassment. Credential leaks like this one cascade into gaming account takeovers when the same password or recovery email is reused for a child’s Roblox, Fortnite, or Discord account. Public reporting shows these identity chains frequently expand within days of a healthcare breach appearing on a ransomware leak site.

Spacebears Ransomware Group Track Record

Public reporting attributes the attack to the spacebears ransomware group. The group emerged in late 2024 and has targeted mid-sized healthcare providers, local governments, and retail businesses. Notable prior victims include other regional medical practices and service organizations whose patient and employee data were published after ransom demands went unpaid. Their typical playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive databases, encryption of systems, and extortion via dual pressure: threatening to release patient data while maintaining a public leak site that counts down deadlines. The group’s posts often highlight stolen SSNs and medical records to increase pressure on victims.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains exist from this breach.
• Rotate any password you ever used at a SmilePoint clinic or its affiliated brands, and enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address and credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed records while you focus on securing your family’s daily digital life.

The incident shows how quickly dental records can become fuel for larger identity crimes. Taking deliberate steps now limits the damage and prevents the breach from growing into long-term fraud or doxxing campaigns against you or your children. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to regain control of your exposed information.