DentaQuest Breach Exposed Sensitive Data of 2.6 Million Accounts

DentaQuest, a major U.S. dental benefits administrator owned by Sun Life, disclosed a cybersecurity incident involving unauthorized access to a limited portion of its network, exposing sensitive information tied to 2.6 million accounts. The breach was first publicized by the extortion group ShinyHunters, which claimed to have stolen more than 234 GB of data and later leaked the dataset after an alleged failure to reach an agreement with the company.

Analysis of the leaked data found records containing email addresses, full names, phone numbers, dates of birth, genders, government-issued IDs, and health insurance information. DentaQuest said its systems remained operational and customer service saw only limited disruption while external experts investigated the scope of the compromise, but the exposed data significantly increases the risk of phishing, social engineering, identity theft, and related fraud targeting affected individuals.