DentaQuest breach exposed data linked to 2.6 million accounts
Summary
DentaQuest confirmed unauthorized access to part of its network and limited customer-service disruption. Have I Been Pwned identified records for 2.6 million accounts in a dataset ShinyHunters claimed to have stolen and leaked.
Key points
- DentaQuest confirmed unauthorized access to a limited portion of its network and said customer service experienced limited disruption.
- ShinyHunters claimed it stole more than 234 GB of DentaQuest data and later leaked it after negotiations reportedly failed.
- Have I Been Pwned identified records for 2.6 million accounts in the leaked dataset; DentaQuest did not confirm that clients were affected.
- Reported exposed information included names, email addresses, phone numbers, government-issued IDs, health insurance details, genders, and dates of birth.
- Have I Been Pwned said roughly 66% of the records were already in its database from earlier incidents involving other organizations and services.
- DentaQuest said it secured its environment, contained the incident, and engaged external experts to investigate.
Article Details
- Victim Organization
- DentaQuest
- Incident Type
- Unauthorized access to a limited portion of DentaQuest's network; ShinyHunters claimed data theft and the data was later publicly leaked.
- Data Types Exposed
- Email addresses
- Full names
- Phone numbers
- Government-issued IDs
- Health insurance information
- Genders
- Dates of birth
- Affected Records
- 2.6 million accounts, identified by Have I Been Pwned in the leaked dataset
- Affected Data Size
- More than 234 GB, as claimed by ShinyHunters
- Operational Impact
- DentaQuest reported limited disruption to customer service and said its systems remained fully operational.
- Ransom Or Extortion
- ShinyHunters claimed it could not reach an agreement with DentaQuest and subsequently leaked the data. The article does not report a ransom amount.
- Claim Status
- confirmed