Hackers claim to have accessed the records of more than 500 patients of a Queensland-based dental clinic, but Eric Davis Dental says no evidence of compromise found.
Hackers linked to the Gunra ransomware-as-a-service operation have listed Eric Davis Dental as a data breach victim on its darknet leak site, potentially compromising the medical data of hundreds of patients.
The clinic, based in Margate Beach, Queensland, was listed on 8 April, and while no data has yet been published, the hackers have listed a file tree of the documents they claim to have exfiltrated.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
The data is structured into three folders – HealthCoachData, Scans, and Scans 2025 – alongside a loose collection of more than 500 PDFs labelled with a potential patient’s name. The folders contain various letters of referral, DNA results, tax invoices, receipts, and invoices.
In most cases, the names of patients are attached to each file.
Gunra has not listed the total amount of data allegedly compromised, nor any ransom demand.
Eric Davis Dental is aware of the hacker's claims, and doubts their veracity.
"Following these claims, we have undertaken a comprehensive review of our systems with our IT security providers," Doctor Davis told Cyber Daily.
"At this time, we have not identified any evidence of a cyber security incident, system compromise, or data breach within our environment."
Similarly, Doctor Davis said the investigation did not uncover any signs of ransomware activity or data exfiltration.
"We are aware that such claims can arise from unverified third-party sources, including material published by threat actors, which is not necessarily indicative of a confirmed breach," Doctor Davis said.
"We have engaged with the Australian Cyber Security Centre (ACSC) and relevant authorities and will continue to monitor the situation.
"Should any verified information emerge, we will act in accordance with our regulatory obligations."
Who is Gunra?
Gunra is one of 12 new ransomware groups that emerged in the second quarter of 2025, and Eric Davis Dental is one of its first Australian victims.
The group hires out its ransomware infrastructure to affiliates for a cut of any ransoms paid and is currently actively recruiting.
“Regardless of your country of origin, language, age, or religious beliefs, anyone on Earth can collaborate with us at any time,” Gunra said on its leak site.
“Regardless of your methods, if you can gain access to corporate or institutional systems, you are welcome to contact us for collaboration.”
Cyber security firm Trend Micro went into some detail regarding a Linux variant of Gunra’s ransomware in a July 2025 blog post, and the group’s technical skills seem readily apparent.
“While other ransomware groups also equip their payloads with multi-thread encryption, it is usually fixed and based on the number of processors available in the victim’s machine,” Trend Micro said.
“There are also other ransomware that allow for configuring number of threads, such as BERT ransomware, but they have been observed to only allow up to 50 simultaneous threads. This Gunra update features both configurability and an increased number of threads for encryption, making it a powerful new variant.”
Gunra also claims to have established its own “hacker business forum”, called Golden Community.
Who is Eric Davis Dental?
Based in the seaside town of Margate in Queensland, Eric Davis Dental is the practice of Dr Eric Davis and his son, Daniel.
The clinic describes itself as a “health-centred practice” and provides a range of general and cosmetic dentistry, alongside children’s dentistry. The practice offers what it calls “a biological approach to dental care” and offers several products via its online store.
Eric Davis Dental also has a practice in Forest Glen.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
David Hollingworth
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.