Sarrell Dental

Sarrell Dental operates as a non‑profit dental provider delivering oral health services to patients primarily in the state of Alabama. The organization offers dental care that includes preventive examinations, restorative treatments, and diagnostic procedures aimed at maintaining and improving oral health. As part of its mission, Sarrell Dental seeks to expand access to dental care for underserved communities within its service area. It maintains electronic health records for nearly 400,000 patients, capturing personal identifiers, insurance details, and comprehensive clinical information such as service dates, procedure codes, diagnoses, and treating dentists. This substantial patient base reflects the scale of its operations and the breadth of its dental health management activities. Sarrell Dental’s non‑profit status directs any surplus revenue back into service provision, community outreach, and programs designed to reduce barriers to oral health care. The organization’s commitment to improving oral health outcomes is evident in its focus on delivering consistent, quality dental services to the populations it serves.

Headquartered in the United States, with its primary operations located in Alabama, Sarrell Dental functions as an independent non‑profit entity without a disclosed parent company or subsidiary structure. Its distinguishing attributes include a charitable mission centered on dental health and the responsibility of safeguarding a large volume of patient health information. In early 2019, Sarrell Dental experienced a ransomware attack that was detected mid‑year, prompting the immediate shutdown of affected servers and a two‑week operational closure while systems were rebuilt and security controls were strengthened. Although forensic analysis found no evidence that data had been exfiltrated, the organization issued breach notifications because it could not definitively rule out unauthorized access to sensitive information stored on the compromised systems. The types of data potentially exposed included patient names, addresses, Social Security Numbers, health insurance details, and detailed treatment records encompassing service dates, procedure codes, diagnoses, and treating dentists. The incident underscored the necessity for robust cybersecurity protections in health‑care settings that manage extensive personal and clinical data, and it prompted Sarrell Dental to enhance its defensive measures following the restoration of normal operations.