Dyras Dental

Dyras Dental operates as a dental service provider based in Michigan, with its headquarters located in the United States of America. The organisation delivers dental care to patients and manages associated administrative functions such as patient records, insurance billing, and financial documentation. Its operations involve the collection, storage, and processing of protected health information, employee tax documents, and voicemails containing patient details. By handling these data types, Dyras Dental is subject to federal privacy regulations including the Health Insurance Portability and Accountability Act (HIPAA). The organisation serves individuals seeking dental treatment and likely works with insurance carriers to process claims and payments. Its core activities therefore combine clinical dental services with the management of sensitive health and financial information.

In September 2020, Dyras Dental experienced a ransomware attack carried out by the Egregor group, which resulted in the exfiltration of over 100 files containing patient‑protected health information, employee tax records, and voicemails with patient details. The attackers published a selection of these files on a leak site, primarily consisting of financial and insurance billing records, as proof of the compromise. Despite the public leak, Dyras Dental did not issue an acknowledgment of the incident, respond to inquiries, or post a breach notification on any official channel. The subsequent removal of the leaked listing from the threat actors’ site prompted speculation about possible negotiations, although no confirmation was provided by either party. The exposure of protected health information in the attack suggests a potential unreported HIPAA violation, highlighting the organisation’s handling of sensitive data. This incident underscored the broader trend of ransomware groups targeting medical and dental entities without regard for sector‑specific safeguards. Consequently, Dyras Dental’s experience illustrates the intersection of dental service operations with cybersecurity risks and regulatory obligations in the healthcare sector.