Issaqueena Pediatric Dentistry Data Breach 2026 (Interlock Ransomware): 501 Pediatric Dental Patients Exposed. 118 GB Leaked. What To Do

What happened

Issaqueena Pediatric Dentistry & Orthodontics is an upstate South Carolina pediatric dental and orthodontic practice founded in 2010. The practice operates three locations in Seneca (314 Union Station Drive, 29678), Clemson (620 Issaqueena Trail, 29631), and Powdersville (3453 SC-153, Piedmont, 29673). Staff includes three pediatric dentists, three general dentists, and one orthodontist. Services include sedation dentistry (nitrous, IV, hospital), laser dentistry, and orthodontics.

Between November 9 and 11, 2025, an unauthorized actor accessed Issaqueena’s network server files. The intrusion was discovered on November 11, 2025 when ransomware encrypted files. On November 24, 2025, the Interlock ransomware group claimed responsibility and listed the practice on its dark-web leak site — claiming approximately 118 GB of exfiltrated data and citing “low security” at the facility in its leak-site statement.

Issaqueena filed with HHS OCR on February 4, 2026 — confirming 501 affected individuals.

The public posting of the data strongly suggests ransom was not paid.

What was stolen

Per the entity’s substitute notice:

• Full name
• Social Security number
• Date of birth
• Home address
• Government IDs
• Medical information
• Financial information

Interlock’s leak-site description additionally lists:

• Phone numbers
• Personal / clinic images
• Full medical histories
• Operational records

Why pediatric SSN exposure is uniquely severe

Pediatric Social Security number exposure is among the most damaging categories of breach data. Child identity theft typically goes undetected for years because parents don’t routinely monitor minor credit files, and damage often only surfaces when the child applies for their first credit card, student loan, or apartment. The 501 affected pediatric patients here face long-tail synthetic-identity-theft risk that may not surface for a decade or more.

What Issaqueena is offering

• Complimentary identity monitoring, fraud consultation, and identity theft restoration services through IDX
• Enrollment line: 844-525-5119 (Monday to Friday, 9 a.m. to 5 p.m. Eastern)
• Enrollment deadline: May 2, 2026 (already passed — call IDX immediately to request late enrollment)
• Third-party security experts engaged for hardening

What to do

1. Enroll your child in IDX monitoring through the activation code in the letter. If the May 2, 2026 deadline has passed, call IDX immediately to request late enrollment.
2. Freeze your child’s credit at all three bureaus (Equifax, Experian, TransUnion). Minors require manual outreach with proof of guardianship — start the process today. A child credit freeze is the strongest available protection.
3. File IRS Form 14039 in your child’s name if SSN exposed.
4. Check your child’s Social Security earnings history annually starting at age 14 — unauthorized earnings reports are an early sign of synthetic identity theft.
5. Document the breach for future reference — if your child encounters identity-theft issues at age 18+, the documentation will help with disputes.
6. Stop the ongoing flow of your child’s dental records. HealthConsent files HIPAA restriction requests so the pediatric dental and orthodontic data exposed in this breach is not continuously re-shared.

Continue reading

• Your eight HIPAA rights, in plain English
• Other 2026 healthcare data breaches