Soniva Dental Care Data Breach

What Patients of These Six Texas Practices Need to Know

Soniva Dental Care, a San Antonio, Texas-headquartered dental, orthodontic, and cosmetic dentistry group operating 14 locations, has disclosed a data breach after a ransomware attack on its remote access infrastructure. Six affiliated practices have each filed their own separate notice with the Texas Attorney General: Agave Dental Floresville, Allwyn Dental, Azle Smiles, Kashi Dental, Mysa Dental, and Wilson Dental.

According to Soniva Dental Care and reporting by The HIPAA Journal, the company’s IT support provider flagged suspicious remote access sessions on May 26, 2026. Soniva says it quickly shut down external communications, disabled remote-access accounts, and locked down its infrastructure, and that its patient record system and archive data were unaffected. Even so, the company could not rule out unauthorized access to patient files. A ransomware-as-a-service group calling itself TheGentlemen has claimed responsibility for the attack; the group has reportedly been recruiting affiliates away from rival ransomware operations by offering a 90% cut of ransom payments. Six of Soniva’s practices filed notice with the Texas Attorney General on July 28, 2026, each stating that notice had already been provided to consumers by mail, email, website posting, and print media.

Six Practices Named So Far, Possibly More

The HIPAA Journal’s coverage is explicit that the practices named below “include, but may not be limited to” the six confirmed so far, and Soniva operates 14 locations in total. Patients of any Soniva-affiliated practice, not just the six listed here, should watch for a notice letter. Per individual Texas Attorney General filings, each practice reported:

• Agave Dental Floresville: 11,790 Texas residents affected
• Azle Smiles: 9,444 Texas residents affected
• Kashi Dental: 6,027 Texas residents affected
• Wilson Dental: 3,476 Texas residents affected
• Mysa Dental: 3,394 Texas residents affected
• Allwyn Dental: 4,013 Texas residents affected

A Number That Doesn’t Quite Add Up, in the Wrong Direction

The HIPAA Journal reports that Soniva Dental Care told the Texas Attorney General “up to 30,000” Texas residents were potentially affected. But added together, the six individual practice filings above total roughly 38,000 Texas residents, already well above that initial company-wide figure. We haven’t seen an explanation for the gap. It may reflect overlapping patients across practices, a rounded early estimate later overtaken by the individual filings, or simply incomplete reporting. Either way, the true scope of this breach looks larger than the number first reported, not smaller.

What Information Was Exposed?

Per Soniva Dental Care’s own disclosure and the individual Texas Attorney General filings, exposed information includes:

• Full Name
• Address
• Date of Birth
• Driver’s License Number
• Government-Issued ID Number
• Medical Information
• Health Insurance Information

What Is Soniva Offering?

No credit monitoring or identity theft protection service has been confirmed. Soniva Dental Care has advised affected individuals to place a fraud alert with the three major credit bureaus, but that is guidance, not a service the company is providing.

Your Information Is at Risk

This isn’t just a name-and-address exposure. A driver’s license number or government-issued ID combined with medical and health insurance information can support both classic identity theft (new credit accounts, fraudulent tax filings) and healthcare fraud, including billing insurance for services a patient never received. Patients of any Soniva-affiliated practice should treat a notice from this breach seriously, whether or not their specific practice is named above yet.

Do You Have Legal Options?

Dental practices that collect Social Security-adjacent identifiers, driver’s license numbers, and protected health information have a legal duty to safeguard that data and to notify patients when it’s compromised, whether the practice operates independently or as part of a larger group like Soniva Dental Care.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

Which practices are affected by the Soniva Dental Care data breach?

At least six confirmed so far: Agave Dental Floresville, Allwyn Dental, Azle Smiles, Kashi Dental, Mysa Dental, and Wilson Dental. Soniva operates 14 locations total, and reporting notes the affected list may not be complete.

How many people were affected?

Soniva told the Texas Attorney General up to 30,000 residents were potentially affected, but the six individual practice filings add up to roughly 38,000 Texas residents on their own.

What information was exposed?

Names, addresses, dates of birth, driver’s license numbers, government-issued ID numbers, medical information, and health insurance information.

Is Soniva offering credit monitoring?

Not that has been confirmed. Affected individuals have only been advised to place a fraud alert with the credit bureaus themselves.