Smile Team Orthodontics breach: SafePay leaks patient payment plans and treatment histories
SafePay ransomware published data stolen from NSW's Smile Team Orthodontics, including hundreds of patient payment plans, some treatment histories and staff details. Patients should watch for phishing and unusual account activity, and wait for the practice's notice.
If you have been a Smile Team patient, read any notice the practice sends and be wary of calls, texts or emails that quote your treatment or payment plan details. Check the payment accounts linked to your plan for anything unfamiliar, and ask the practice directly if you are unsure whether you were affected.
What’s happening
The SafePay ransomware group listed Smile Team Orthodontics, a six-clinic practice in New South Wales, on its leak site on 6 March 2026. On 10 March it published stolen files. Cyber Daily reports these included staff listings, staff home addresses and personal emails, medical certificates, training records, hundreds of DentiCare patient payment plans and several patient treatment histories. Smile Team confirmed unauthorised access to part of its IT systems. It said it had contained the incident, brought in an external incident response manager and cyber security experts, and notified the Office of the Australian Information Commissioner and the Australian Cyber Security Centre. It said it would contact every affected person. The number of people affected has not been disclosed, and the pages reviewed do not say how the attackers got in or whether a ransom was paid. HARD found no later developments, such as an updated notification count or any charges, when it checked on 3 November 2026. There is nothing to patch. The leaked data is already public.
- What
- Breach
- Affects
- Smile Team Orthodontics (NSW, Australia) patient and staff records
- Fixed in
- Nothing to patch
- Since
- 6 Mar 2026
- Closed
- 10 Mar 2026
Timeline
- UpdateNothing to patch
Smile Team confirmed a cyber incident involving unauthorised access to part of its IT systems. It said it had contained it, engaged an external incident response manager and cyber security experts, notified the Office of the Australian Information Commissioner and the Australian Cyber Security Centre, and would contact all affected people.
- Wider attacksNothing to patch
SafePay published stolen data, including staff listings, staff home addresses and personal emails, medical certificates, hundreds of DentiCare patient payment plans and several patient treatment histories.
- Made publicNothing to patch
The SafePay ransomware group listed Smile Team Orthodontics, a New South Wales practice with six clinics, on its leak site and threatened to publish the full data unless the practice contacted it to negotiate.
Sources
- Exclusive: SafePay ransomware claims hack of Smile Team OrthodonticsCyber Daily · 10 Mar 2026
- SafePay Targets Australian Healthcare Provider Smile Team OrthodonticsDeXpose · 6 Mar 2026