Santa Barbara Endodontics, a dental specialty practice in Santa Barbara, California, has been named by a ransomware group that claims it attacked the practice. The practice has not publicly confirmed an incident.
This page explains what has been reported, what has not, and what patients can do now.
Santa Barbara Endodontics’s Data Breach Investigation
Santa Barbara Endodontics is a dental specialty practice in Santa Barbara, California, that focuses on root canal treatment and related procedures such as retreatment and microsurgery. Patients commonly come to an endodontist on a referral from a general dentist, so a person may have records with the practice without ever having chosen it directly. That matters here, because many people who could be affected may not think of themselves as patients of this office.
According to ransomware-tracking websites, a group calling itself The Gentlemen listed the practice on its dark web leak site. The listing is recorded as dated October 14, 2026, and trackers picked it up two days later, on October 16, 2026. A leak-site listing is a claim made by the criminals themselves. It is usually meant to pressure a victim into paying, and it does not by itself prove that any patient files were taken. The listing we reviewed did not say what kind of data the group says it holds.
At the time this page was written, we could not find a notice posted by the practice, a filing with a state attorney general, or a news report in which the practice confirms the incident. A search of the California Attorney General public breach list did not show a filing under the practice name. Until the practice or an official agency says more, the scope of the incident, the number of people affected, and the exact timeline remain unconfirmed. This page does not assume anything beyond what has been reported.
Ransomware groups often use what is called double extortion. They break into a network, copy files, lock the systems, and then threaten to publish the copied files unless a ransom is paid. Healthcare practices of every size are targeted, including small offices, because patient records are valuable and small practices often have limited security staff. A dental or endodontic office typically holds names, addresses, phone numbers, dates of birth, insurance details, medical and dental histories, and imaging such as X-rays and scans. Some offices also keep Social Security numbers and payment card details. We have no information that any of these items were taken from Santa Barbara Endodontics, and we do not suggest that they were. We list them only so patients understand the kinds of records a practice like this normally keeps.
Health privacy rules generally require a covered provider to notify affected patients without unreasonable delay and no later than 60 days after discovering a breach of unsecured health information. Many states also set their own deadlines and require notice to the attorney general when a certain number of residents are affected. In practice, notice letters often arrive weeks or months after an attack, because the practice first has to investigate with outside experts, work out which files were reached, and then identify the people in those files. If a letter comes, it is the most reliable way to learn whether your own information was involved, which items it covered, and what protection is being offered.
Patients should also expect scams to follow a claimed attack. Criminals who say they hold patient data sometimes email or call people directly, or imitate the practice, to ask for payment or personal details. Do not respond to a message that mentions this incident until you have checked it by contacting the practice through a phone number you already trust. If you were a patient or were referred to the practice for root canal care, keep your appointment records and any letters, because they can help you show later when and how you learned of the exposure.
This page will be updated if the practice or a regulator publishes confirmed details.
When Did This Breach Occur?
The practice has not announced when any incident began or when it was discovered. Ransomware-tracking sites record the group’s listing as dated October 14, 2026, and first recorded it on October 16, 2026.
Those dates describe when the claim appeared online, not necessarily when the practice was breached. If you receive a notice, look for the discovery date and the dates of unauthorized access in the letter itself.
What Information Was Breached?
The listing we reviewed did not say what information the group claims to have. The practice has not confirmed any data types, and we found no official notice that lists the specific items involved.
For a dental specialty practice, records can include contact details, dates of birth, insurance information, treatment history and imaging. Whether any of that was involved here is not known, so treat it as a question to check against your own letter, not as a fact.
What You Can Do
If you were a patient of Santa Barbara Endodontics, or you think you may be affected, consider these steps.
- Keep any letter you receive, with the envelope and any enrollment code, so you have a record of what you were told.
- If a notice offers free credit monitoring or identity protection, enroll before the deadline in the letter.
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for accounts or inquiries you do not recognize.
- Consider placing a free fraud alert or a security freeze with each of the three credit bureaus.
- Review your insurance explanations of benefits and bank statements for charges or services you do not recognize.
- Be careful with calls, texts, and emails that mention the practice or this incident, and report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov and to your state attorney general.
File a Data Breach Lawsuit Against Santa Barbara Endodontics
People whose personal and health information is exposed in a data breach may have legal options if the organization failed to use reasonable safeguards. Whether a claim exists depends on the facts, including what information was involved, how the incident happened, and how the practice responded.
If you received a notice connected to Santa Barbara Endodontics, or you believe your information was involved, you can speak with a lawyer about whether you may be able to join a class action lawsuit to seek compensation for the exposure of your information, the time you spent responding, and any losses you suffered.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
