Henry Schein subsidiary eAssist hit by ransomware attack, about 3,000 dental practices face data security risks

DentalGoodNews｜On September 8, 2026, eAssist Dental Solutions, a controlled subsidiary of Henry Schein, Inc., sent a statement to customers confirming that it is investigating a "potential information security incident." Previously, the hacker group Direwolf claimed to have carried out a ransomware attack on the company and gained access to its internal systems.

According to eAssist's disclosure, the hacker group Direwolf listed eAssist as a target on a dark web leak site in September. In the statement sent to customers, eAssist said the company has engaged third-party experts to support the investigation and response efforts, and is currently assessing whether customer or patient information has been affected. Out of an abundance of caution, eAssist advised customers to change their system passwords and remove old or inactive user accounts from practice management software, clearinghouses, claims software, and portals.

Headquartered in Utah, United States, eAssist is an outsourced dental billing and revenue cycle management company. The company operates a cloud platform integrated with practice management software, employs approximately 1,750 billers, and serves about 3,000 dental practices across the United States. According to public information, Henry Schein is the controlling shareholder of eAssist [To be verified: the specific shareholding ratio and acquisition timing cannot be verified due to the lack of primary sources].

This is not the first cybersecurity incident to affect a Henry Schein business. According to public records, the ransomware-as-a-service (RaaS) hacker group BlackCat previously breached Henry Schein's manufacturing and distribution business systems on September 27, 2023, and remained latent in its network for more than two weeks before being discovered; the company publicly announced the incident in October of the same year and took some systems offline, and a Data Breach notification in December further showed that the personal information of approximately 29,000 people may have been affected.

According to previous reporting by DGN, Henry Schein One, a subsidiary of Henry Schein, reached a strategic agreement with Black Talon Security in July 2026 to introduce the continuous threat management platform EAGLEi, aiming to strengthen data protection capabilities at the practice level.

As of now, the scope of data allegedly obtained by the hackers has not been independently confirmed. eAssist has not yet publicly confirmed the specific scale of the Data Breach, and the relevant investigation is still ongoing.