eAssist Dental Solutions Faces Alleged Ransomware Attack by DireWolf Group In September 2026, eAssist Dental Solutions a Utah-based dental billing and revenue cycle management provider serving thousands of U.S. dental practices was named as an alleged victim of a cyberattack by the ransomware group DireWolf. The claim, first observed on September 6 via the group’s dark web leak site, remains unverified, with no public confirmation, denial, or details from eAssist or its parent company, Henry Schein (which acquired a 70% stake in 2021). Key Details of the Incident: - Threat Actor: DireWolf, a ransomware group active since May 2025, employs double-extortion tactics, encrypting files while threatening to leak stolen data. Healthcare organizations, including dental and medical billing firms, account for roughly 15% of its 118+ claimed victims as of August 2026. - Scope of Attack: The dark web listing lacks specifics on compromised systems, data types, or ransom demands. eAssist’s platform handles sensitive patient and practice data, including billing and insurance records, but no evidence confirms exposure. - Response: Multiple threat intelligence sources (Ransomware.live, RedPacket Security, BrinzTech) have indexed the claim, but no independent verification exists. eAssist has not issued a statement, leaving the incident’s validity and impact unclear. Background on eAssist: Founded in 2011 and headquartered in Farmington, Utah, eAssist provides cloud-based billing, claims processing, and revenue cycle management for dental practices nationwide. The company employs 1,750 U.S.-based billers and integrates with dental practice management software. Legal Action: The Almeida Law Group is investigating potential class action litigation for affected individuals, though no breach has been confirmed. The firm’s inquiry underscores broader concerns about healthcare sector vulnerabilities to ransomware, following DireWolf’s recent targeting of other medical entities, including the National Kidney Registry.

On December 6, 2023, the California Office of the Attorney General disclosed a data breach affecting Henry Schein, Inc., initially announced on October 15, 2023. The incident involved the unauthorized exposure of employees' personal information, though the exact number of impacted individuals and the breach methodology remain undisclosed. The compromised data may include sensitive employee details, such as names, addresses, Social Security numbers, or financial records, posing risks of identity theft, fraud, or phishing attacks. While the company has not confirmed the attack vector (e.g., phishing, system vulnerability, or insider threat), the breach underscores vulnerabilities in safeguarding internal workforce data. The lack of transparency regarding the scope and cause further complicates risk assessment for affected employees. Regulatory scrutiny and potential legal repercussions may follow, given the sensitivity of the exposed information and compliance obligations under data protection laws like CCPA (California Consumer Privacy Act).

The Maine Office of the Attorney General reported a data breach involving Henry Schein, Inc. on December 6, 2023. The breach occurred on September 27, 2023, and was discovered on October 14, 2023, following an external system breach involving hacking, affecting approximately 29,112 individuals. Identity theft protection services were offered for 24 months through Experian's IdentityWorks.