Ransomware Leaves Hundreds of Dental Practices’ Data Inaccessible

PerCSoft, a cloud management provider for Digital Dental Record, which runs the data backup service DDS Safe that is used by hundreds of dental offices in the US, recently fell victim to a ransomware attack. The attack, which occurred on August 26, rendered sensitive data, including medical records, charts, and insurance documents inaccessible for approximately 400 dental practices. Reporting indicates PerCSoft was hit with the Sodinokibi variant and that the company chose to pay the ransom demand. The decryptor was shared with the impacted companies to recover their encrypted files; however, at the time of this writing, some offices claim they were unable to restore all files. The NJCCIC discourages victims from paying ransom demands if impacted by a ransomware infection and, instead, ensure they have a comprehensive data backup plan in place. Organizations are advised to implement a defense-in-depth cybersecurity strategy and follow the principle of least privilege. For more information, please review the Digital Dental Record update, the KrebsOnSecurity article, and the NJCCIC product, “Ransomware: Risk Mitigation Strategies.”

AlertNJCCICRansomware, sodinokibi