All ransomware incidents
Ransomware group thegentlemen hits First Dental Health
First Dental Health — a healthcare target operating in US has been listed by the thegentlemen ransomware group on 2026-10-16. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | First Dental Health |
|---|---|
| Threat Group | thegentlemen |
| Summary | First Dental Health, a healthcare organization in the United States, was listed by the thegentlemen ransomware group on its leak site on 2026-10-17. |
| Date of Breach | 2026-10-16 |
| Discovery Date | 2026-10-17 |
| Region | US |
| Target Domain | firstdentalhealth.com |
| Business Sector | Healthcare |
| Severity | MEDIUM |
Claim by thegentlemen
firstdentalhealth.com First Dental Health, Inc. dental consulting company founded in 1995 and based in Sacramento, California. It is led by Chairman and CEO Michael Zhang together with founder Dr. Rick Kershner, a periodontist who previously worked with Western Dental, Coast Dental and Pacific Dental Services. The company transforms existing dental practices of 40 to 250 chairs through leadership development, culture building and operational excellence, typically raising performance by 40 to 80 percent within 2 to 4 years. Its flagship case is Sacramento Dentistry Group, which grew from around 330000 dollars monthly revenue in 2014 to roughly 640000 dollars by 2023. It also runs a DSO consolidation model that merges 6 to 10 practices under one brand with owners keeping equity and a 3 to 7 year exit path. The team has built 14 companies that made the Inc. 5000 list, positioning it as a small but high-impact operator in US dental business consulting.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.