Ransomware Attack Exposes Sensitive Data of Pediatric Dentistry of Oklahoma Patients Pediatric Dentistry of Oklahoma, based in Oklahoma City, recently disclosed a data breach stemming from a sophisticated ransomware attack on its third-party management company. The incident was detected on February 14, 2024, when unauthorized access to the network triggered an immediate response, including system lockdowns and an internal investigation. Forensic analysis revealed that protected health information (PHI) and personally identifiable information (PII) of patients may have been accessed by threat actors. Exposed data includes names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical and dental histories, treatment details, medication records, and insurance information. The combination of sensitive health and identity data heightens risks for affected individuals, including potential identity theft and fraud. While the exact number of impacted patients remains undisclosed, the breach is classified as severe due to the nature of the compromised data and the use of ransomware—a tactic often linked to data exfiltration and extortion. As of now, there is no evidence that the stolen information has been misused, though the possibility cannot be dismissed. Pediatric Dentistry of Oklahoma is notifying affected individuals by mail and has provided resources for identity theft protection, including a dedicated contact line (405-946-2455) and mailing address (3613 NW 56th St., Suite 105, Oklahoma City, OK 73112). The practice has also directed patients to Federal Trade Commission (FTC) guidance for additional support. The incident underscores the growing threat of ransomware targeting healthcare providers and their vendors, where sensitive patient data remains a prime target.