Persona Dental, a dental practice located in Sartell, Minnesota, suffered a ransomware attack. This incident was publicly claimed by the hacking group INC RANSOM, which posted about it on the dark web on June 6, 2026, stating they had obtained the organization's data. Persona Dental subsequently reported the breach to the U.S. Department of Health and Human Services (HHS) on September 10, 2026.
The breach affected 3,386 individuals in the United States. The HHS filing categorized it as a hacking/IT incident involving a network server. While the practice provides general, cosmetic, and restorative dental services, the specific types of protected health information (PHI) exposed, such as medical records, financial data, or Social Security Numbers, have not been publicly detailed. Persona Dental has not publicly confirmed the ransomware claim, nor have they issued an official statement or breach notification letter as of the available research.
Details regarding the exact timeline of the attack, including when it started, how long unauthorized access occurred, or when the breach was first discovered by Persona Dental, have not been made public. No state Attorney General filings have been identified, and no class action lawsuits or multidistrict litigations (MDLs) have been publicly reported in connection with this incident.