Ransomware Group: BEAST

VICTIM NAME: Van Hook Dental Studio

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BEAST Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On August 22, 2025, Van Hook Dental Studio—a United States-based healthcare provider operating as a privately owned dental laboratory that supports dental practices—appears in a ransomware leak post. The page describes Van Hook Dental Studio as a firm with around 40 years of experience and a product range that includes fixed, removable, and implant restorations. It also notes services such as custom shades, imaging, clinical advising, and on-site assistance, and states that all products are FDA-cleared and manufactured in the U.S.A. The entry is framed as a data-leak event and references the victim’s site (defanged here as vhdental[.]com). The post date provided is August 22, 2025, which should be treated as the leak’s publication date in the absence of a disclosed compromise date.

The leak page includes 21 image attachments, presented as visual materials supporting the post’s claims. The image links point to onion service addresses (onion domains), which are defanged in this summary and not displayed here. A claim URL is indicated on the page, aligning with common leak-post structures; however, the visible text does not reveal any ransom amount or specific data types affected. The excerpt confirms the victim is a healthcare organization based in the United States and references the vendor’s site via the defanged domain vhdental[.]com.