All ransomware incidents
Ransomware group thegentlemen hits Gio Dental Med Spa
Gio Dental Med Spa — a healthcare target operating in IT has been listed by the thegentlemen ransomware group on 2026-10-16. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Gio Dental Med Spa |
|---|---|
| Threat Group | thegentlemen |
| Summary | Gio Dental Med Spa, a healthcare organization in Italy, was listed by the thegentlemen ransomware group on its leak site on 2026-10-17. |
| Date of Breach | 2026-10-16 |
| Discovery Date | 2026-10-17 |
| Region | IT |
| Target Domain | giodentalspa.com |
| Business Sector | Healthcare |
| Severity | MEDIUM |
Claim by thegentlemen
giodentalspa.com Gio Dental & Med Spa private dental and aesthetic clinic founded around 2006 in Ciudad Juárez, Mexico, targeting patients from the US border region of El Paso and Las Cruces. The practice has about 6 employees and estimated annual revenue of roughly 430000 dollars, making it a small self-owned business with no external funding. Its business model is built on cross-border dental tourism, accepting American HMO and PPO insurance and transporting patients from El Paso directly to the clinic. Core services are dental implants, orthodontics, endodontics, veneers and oral surgery, plus a med spa division with botox, fillers and physiotherapy. The clinical founder and director is Dr. Mauro D. Álvarez, an implantology specialist, working with a team of about five additional dentists. The company is positioned on price: complex dental procedures cost a fraction of US rates while offering full-service treatment and aftercare for American patients.
Posted by the thegentlemen threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.