Azle Smiles 2026 Data Breach
The 2026 Azle Smiles data breach affected at least 9,444 people according to the Texas Attorney General after an attack on remote-access infrastructure may have exposed patient information.
Exposed Data Types
2 sensitive7- Medical information
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Driver's license numbers
- Government issued IDs
About This Breach
Azle Smiles is the Azle, Texas practice of the multi-location Soniva Dental Care group and provides general, cosmetic, and orthodontic dental care.
How Did the Incident Occur?
On May 26, 2026, the practice was informed by its IT support company that irregularities had been found in remote-access session hosts. An attack was identified within minutes and external connections were terminated. The practice said its patient-record platform was restored quickly and archive data was not affected.
What Information Was Affected?
The information varied by person and may have included names, addresses, dates of birth, driver's-license numbers, government-issued identification, and medical information. The Texas Attorney General entry also lists health-insurance information. The practice said payment information and the dental care it provided were not affected.
How Did the Practice Respond?
Azle Smiles shut down external access, disabled remote-access accounts, forced a practice-wide password reset, and continued monitoring its systems. It said it reported the incident to the Texas Attorney General and HHS and offered affected people complimentary identity-protection monitoring.
What Should Affected People Do?
Notice recipients should enroll in the offered monitoring service and review credit reports and health-insurance explanations of benefits for activity they do not recognize. They may also consider placing a fraud alert with the credit bureaus to make it harder to open new accounts using their identity information.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
