CoreRecon Threat Intelligence  •  Texas Dental Practices & DSOs  •  June 2026 V39

TX Dental Practices:
The Threat Landscape in 2026

MCNA Dental lost 8.9 million patient records. Henry Schein was hit twice by BlackCat, exposing 1M+ records. Change Healthcare compromised 192M individuals. Three TX-specific incidents now confirm the pattern: West Texas Oral Facial Surgery (Lubbock), Pecan Tree Dental (Grand Prairie), and Central Texas Pediatric Orthopedics. Dental records sell for $250–$1,000 per file on the dark web — 10× credit card pricing. CoreRecon documents the full attack surface, compliance stack, and controls that matter.

Download the Full Threat Brief — Free
June 2026 CoreRecon Intelligence Report V39 HIPAA + TDPSA + TX HB 300 + TSBDE 49+ Verified Sources
8.9M
Patient records stolen
MCNA Dental 2023
Largest dental breach ever
192M
Change Healthcare
individuals affected
Feb 2024 — no MFA
$1,000
Max price per file
dental records on
dark web markets
4
Compliance layers:
HIPAA · TDPSA · TX HB 300
TSBDE 22 TAC §108.7
30min
CoreRecon IR SLA
TX-based SOC
SDVOSB certified
What This Brief Covers

TX Dental Practices
Cyber Threat Brief

Full intelligence report on the attack surface facing Texas dental practices and DSOs — from the MCNA supply-chain collapse to PMS credential harvesting, TX-specific incidents, and four-layer compliance obligations. No marketing fluff. Documented incidents, applicable regulations, and actionable controls built for dental practice managers, DSO security leads, and practice owners.

49+ Verified Sources Including:

  • MCNA Dental breach — 8.9M records, LockBit RaaS supply-chain entry via managed dental IT vendor (2023)
  • Henry Schein BlackCat supply-chain — two ransomware rounds, 1M+ records, Dentrix/Eaglesoft vendor access (Oct–Nov 2023)
  • Change Healthcare — 192M individuals, ALPHV, Citrix gateway with NO MFA enforced (Feb 2024)
  • West Texas Oral Facial Surgery (Lubbock, June 2025, INC Ransom, 11,151 individuals)
  • Pecan Tree Dental (Grand Prairie, Jan 2026, Sinobi, 13,300 affected)
  • HIPAA Security Rule §164.312 — ePHI access controls mapped to PMS environment
  • TDPSA (effective July 1, 2024) — biometric and sensitive data scope for dental practice records
  • TX HB 300 — stricter-than-HIPAA Texas health privacy law, attorney general enforcement
  • TSBDE 22 TAC §108.7 — 7-year dental record retention requirement, cybersecurity implications
  • 8 dental-specific controls: PMS segmentation, vendor access, MFA, EDR, backup, IR plan, staff training, insurance review
  • 30-day hardening playbook: immediate actions, network hardening, compliance documentation
  • CoreRecon Fortress pricing: $89–$129/endpoint/month, flat-rate, no hidden escalation

Access the Full Brief

We email it once. No newsletter. No spam. PDF delivered to your inbox.

We use the contact details you provide to deliver this brief and respond to your request. Please do not include patient, client, account, case, or other sensitive information in this form.

Submission failed — please try again or email john@corerecon.com

Brief Sent.

Check your inbox — the PDF is on its way. If it lands in spam, drag it to your inbox so you find it later.

Questions before then? Call (800) 955-2596 — live TX SOC, not a call center.

Book Free Posture Assessment →
SDVOSB Certified • TX-Based SOC • No offshore data routing
Questions? (800) 955-2596
✅ 49+ verified sources
✅ HIPAA + TDPSA + TX HB 300 + TSBDE covered
✅ 8 dental-specific controls
✅ TX-specific incidents: West Texas Oral, Pecan Tree Dental, Central TX Peds Ortho
✅ No spam — one email delivery