MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Health (basic)MediumContained

Upper Dublin Family Dentistry

bd_9a86c2d4313a2c85 · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 13, 2025

Filed

Jul 21, 2025

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Upper Dublin Family Dentistry →3 incidents on file

Upper Dublin Family Dentistry notified the Nebraska AG on July 21, 2025, of a ransomware incident discovered May 13, 2025. One Nebraska resident's name, SSN, and dental records were encrypted and potentially accessed. UDFD engaged forensic investigators, reported to HHS, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

May 13, 2025

Discovered

Jul 21, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_641bb2c284ab67992025-07-21Verified
Massachusetts State AGbd_796adcd6567fd0fe2025-07-21Verified
Vermont State AGbd_a4642a3efde6fed02025-07-21Candidate

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Upper Dublin Family Dentistry
norm: upper dublin family dentistry
Industry: Healthcarellm

Discovered: May 13, 2025
Materiality determined: —
Notification sent: Jul 21, 2025
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Nebraska Attorney GeneralReported the event to the U.S. Department of Health & Human Services
Initial access: exploit_public_facing

During the incident: Engaged a leading cybersecurity and forensic firm to investigate the incident
Contain the threat
Restore system functionality
Reported the event to the U.S. Department of Health & Human Services
Established a toll-free call center to answer questions about the incident
Changes made: Improved its web server infrastructure
Implemented enhanced safeguards to reduce the risk of future incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 21 · first

Massachusetts State AGJul 21 · first

Vermont State AGJul 21 · first

Nebraska State AGJul 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/ff33ebd7-3e11-45c5-8b0c-eb1eb8a55e71.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2025
Raw hash: 735013514677a34f23a1518d20370e4c580aa4eebf19d821fc30fbf6ded37713

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityUpper Dublin Family Dentistry

Incidentdiscovered May 13, 2025

Stated responseEngaged a leading cybersecurity and forensic firm to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov