Ransomware victim disclosure
← All victimsHeavenlyDental
Claimed by obscura · listed 9 months ago
Status timeline
- Listed
Sep 5, 2025
- Data leaked
At a glance
- Group
- obscura
- Status
- Data leaked
- Country
- United States
- Sector
- Healthcare
- Listed on leak site
- Sep 5, 2025
About the victim
AI dossier — public-source company profileHeavenly Dental is a general and family dental practice located in San Fernando, California, serving the greater Los Angeles area since 1985. The practice is operated by Dr. S. Sean Naffas and Dr. Elham Partovi, offering a wide range of services including cosmetic dentistry, orthodontics, oral surgery, and emergency dental care. It is a paperless office accepting most dental insurance plans and has served patients across multiple San Fernando Valley communities.
- Industry
- Dental & Oral Healthcare Services
- Address
- 103 N. Maclay Avenue, San Fernando, CA 91340
- Founded
- 1985
Attack summary
Severity: critical — The victim is a healthcare provider (dental clinic) and data_published status indicates confirmed exfiltration. Dental practices hold regulated PHI/PII including patient health records, insurance data, and personal identifiers, making this a critical-severity incident under HIPAA-governed data.The ransomware group 'obscura' claims to have attacked Heavenly Dental and has published data (disclosed status: data_published). The leak post characterizes the victim as a dental clinic in San Jose, though the actual practice is located in San Fernando, CA; the nature of data exfiltrated or encrypted is not detailed in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Patient records
- Personal health information (PHI)
- Dental insurance records
- Patient contact and demographic information
- Financial/billing records
What the group claims
Dental clinics in San Jose
Sources
Source
Indexed 9 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
