FARMINGTON, Utah, September 9 — A ransomware group has claimed responsibility for an attack on eAssist Dental Solutions, a Utah-based dental billing firm owned by Henry Schein, according to threat intelligence trackers. The claim surfaced on the dark web leak site of the group calling itself “direwolf” on September 6, 2026, and was first indexed by Ransomware.live, a threat intelligence aggregator. The listing alleged the group had gained access to internal company systems, but offered no substantive detail on the intrusion, the systems affected, or the data involved.
There was no stated ransom demand, no data volume, and no description of compromised records. Multiple aggregators, including RedPacket Security and BrinzTech, indexed the posting, but none independently verified the claim.
Neither eAssist Dental Solutions nor its parent company, Henry Schein, has issued a public confirmation or denial of the incident. The Almeida Law Group, which is investigating whether a class action lawsuit can be filed on behalf of affected individuals, has set up a contact form for people who believe they may have been affected. The exact scope of any exposed data remains unknown.
The target
eAssist is a business process outsourcing company headquartered in Farmington, Utah, providing outsourced dental billing, insurance claims processing, patient billing, insurance verification, credentialing, and revenue cycle management for dental practices across the United States. Founded in 2011 by Dr. James V. Anderson, the company was acquired by Henry Schein in June 2021, which took a 70% ownership stake. eAssist operates a cloud-based platform that integrates with dental practice management software and employs roughly 1,750 US-based dental billers serving thousands of practices nationwide.
DireWolf first surfaced in May 2025 and employs double-extortion tactics, combining file encryption with threats to publicly release exfiltrated data. As of August 31, 2026, the group had publicly claimed more than 118 victims, with healthcare organizations accounting for approximately 15% of its targets.
The group has recently claimed other healthcare victims, including hospitals and the National Kidney Registry. The investigation is ongoing, and the full impact of the alleged breach remains unclear. What happens next depends largely on whether eAssist or Henry Schein confirms the intrusion — and on whether the Almeida Law Group finds enough affected individuals to move forward with litigation.
