DentaQuest Breach Exposed Personal and Health Data of Nearly 4 Million People

DentaQuest disclosed a security incident that exposed sensitive personal and health-related information belonging to nearly 4 million individuals after attackers gained unauthorized access to its internal network. The company said it detected the intrusion on May 20 and later determined the threat actors had been inside since May 17, during which time confidential data was stolen. A filing cited by regulators in Texas put the affected population at up to 3,973,000 people.

The compromised data reportedly included names, personal identifiers, and dental or vision information such as provider names, diagnoses, treatments, and billing details. DentaQuest is offering affected individuals two years of identity protection and credit monitoring through Kroll. The incident follows claims by ShinyHunters that it had breached DentaQuest and obtained more than 2.6 million unique email addresses along with names, addresses, and phone numbers.