DentaQuest, LLC

MAPayer

Claim reportedNot reached
CorroboratedDate per source
Regulator filing locatedHHS · May 22, 2026
Enforcement actionNot reached

People affected (as filed)15,000,000

Breach typeCyberattack / Phishing

Location of dataNetwork Server

Business associate involvedYes

HHS submission dateMay 22, 2026

Incident dateMay 17, 2026

Coverage summary: The business associate (BA), DentaQuest, reported that an employee mistakenly posted a spreadsheet to its website that contained the protected health information (PHI) of 3,086 individuals. The PHI involved included clinical, demographic, and financial information. The BA notified HHS, the media, the affected individuals, and its covered entity (CE). In response to the breach, the CE and BA implemented additional…

Status history

◐CorroboratedDate per source
▣Regulator filing locatedHHS · May 22, 2026

Timeline

May 22, 2026Breach report filed with HHS OCR: 15,000,000 people, Network Server.Source: HHS OCR Breach Portal
Date per sourceCoverage published by California AG.Source: California AG
Date per sourceCoverage published by Washington AG.Source: Washington AG
Date per sourceCoverage published by Oregon DOJ.Source: Oregon DOJ
Date per sourceCoverage published by HIPAA Journal.Source: HIPAA Journal
Date per sourceCoverage published by Cybernews.Source: Cybernews
Date per sourceCoverage published by BleepingComputer.Source: BleepingComputer
Nov 1, 2026Record retrieved and matched by DDSBreach.Source: HHS OCR export (cases under investigation)

What this means

If you're a patientLook for a notice letter from the practice. Watch insurance statements for services you didn't receive, and consider a free credit freeze with the three bureaus.

If you run a practiceCheck whether you share software, IT providers or billing vendors named in this record. Confirm your own backups, remote access and email protections with your IT provider.

Change log

2026-11-01 · Record created from public sources