DentaQuest data breach exposes 23M records
DentaQuest is notifying more than 23 million people that attackers broke into its network and may have accessed personal and dental health information. The company says it secured its systems and is offering free credit monitoring to those affected.
- Report priority
- High
- Involves
- Sun Life U.S. Dental
What to do
If you are a DentaQuest member, or a Medicaid or CHIP patient covered through a DentaQuest dental plan, and you receive or have received a written breach notice from the company, enroll in the 24 months of free credit monitoring, fraud support, and identity theft recovery services DentaQuest is offering to notified individuals, and watch for phishing messages that reference the breach.
Reported details
DentaQuest says unauthorized individuals accessed its network between May 17 and May 20, 2026. It discovered the intrusion on May 20, secured its systems, notified law enforcement, and hired Kroll to determine the scope of affected data. Exposed information may include names, addresses, Social Security numbers, Medicaid, Medicare, and member ID numbers, plus dental or vision treatment, provider, diagnosis, and billing details.
The HIPAA Journal initially reported over 15 million affected individuals before DentaQuest's own notice put the figure above 23 million. No specific initial access method, ransomware group, or exploited software flaw has been publicly disclosed.
References
- github.com · advisories vendor advisory
- dentaquest.com · notice-of-data-breach SecurityAffairs
- hipaajournal.com · dentaquest-data-breach SecurityAffairs
- infosec.exchange · @securityaffairs SecurityAffairs
- securityaffairs.co · wordpress SecurityAffairs
- bleepingcomputer.com · coca-cola-confirms-data-theft-in-fairlife-ransomware-attack BleepingComputer
- securityweek.com · coca-cola-confirms-data-breach-after-fairlife-ransomware-attack SecurityWeek
- darkreading.com · fbi-breaking-affiliate-trust-lockbit-takedown DarkReading
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0906 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0908 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0914 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0915 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0916 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0917 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0918 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0919 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0923 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0926 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0929 CERT-FR Advisories
- cert.ssi.gouv.fr · CERTFR-2026-AVI-0937 CERT-FR Advisories
- acn.gov.it · rilevata-vulnerabilita-in-prodotti-elastic ACN CSIRT Italy
- cyber.gc.ca · erlang-security-advisory-av26-750 CCCS Canada
- cyber.gc.ca · redis-security-advisory-av26-748 CCCS Canada
- github.com · 8.6.4...8.8.0 (8.6.4...8.8.0) CCCS Canada
- github.com · PR #15081 CCCS Canada
- github.com · releases CCCS Canada
- cyber.gc.ca · microsoft-security-advisory-av26-747 CCCS Canada
- msrc.microsoft.com · CVE-2026-57978 CCCS Canada
- msrc.microsoft.com · CVE-2026-57989 CCCS Canada
- msrc.microsoft.com · CVE-2026-57990 CCCS Canada
- msrc.microsoft.com · vulnerability CCCS Canada
- cyber.gc.ca · progress-security-advisory-av26-746 CCCS Canada
- docs.progress.com · Fixed-Issues-in-2026.0.3.html CCCS Canada
- progress.com · trust-center CCCS Canada
- cyber.gc.ca · hpe-security-advisory-av26-745 CCCS Canada
- support.hpe.com · docDisplay CCCS Canada
- support.hpe.com · securitybulletinlibrary CCCS Canada
- cyber.gc.ca · mongodb-security-advisory-av26-744 CCCS Canada
- mongodb.com · alerts CCCS Canada