More than a million patientshave begun receiving notifications from dental care provider Dental Care Alliancethat their personal data has been leaked as a result of a breach.
Dental Care Alliance discovered on October 11 that it had been the victim of a hacking attackthat began on September 18, 2020. The company, which is based in Sarasota, Florida, was able to contain the attack by October 13.
Among the data likely to have been leaked by the attack are names, addresses, dental diagnosis and treatment information, patient account numbers, billing information, bank account numbers, the name of the patient's dentist, and health insurance information.
Dental Care Alliance general counsel Dave Quigleytold Databreaches.net that the breach had been reported to all relevant regulatory bodies and that the healthcare provider had notified all 1,004,304 people affected by the incident via letter in November.
Explaining why no remedial services, such as credit monitoring, were offered to patients affected by the breach, Quigley said: “We have no specific indication that personal information was used for malicious purposes.”
He added: "We will continue to do whatever is necessary and appropriate to support and inform those affected over the coming days."
According to the research conducted on the data accessed by the attackers, it concluded that of the bank account numbers leaked, only 10% affected by the breach were visible to unauthorized users.
Dental Care Alliance is an organization that provides dental services in 20 states in America.
The incident comes 10 months after a ransomware attack on Colorado information technology company Complete Technology Solutions (CTS) affected about 100 dental providers in the United States, preventing staff from accessing patient records and treatment plans.
Providers in Colorado, Kansas, Nebraska and Nevada were affected by the incident, including pediatricians in the greater Nebraska area.
