DentaQuest Confirms Data Breach Affecting Over 23 Million Individuals

WASHINGTON (July 27, 2026) — DentaQuest Holdings Inc., a major administrator of dental and vision benefits in the United States, confirmed on Monday that unauthorized access to its systems exposed personal health information belonging to more than 23 million people. The breach occurred over a four-day window between May 17 and May 20.

The company stated that ShinyHunters, an international cyber-extortion group known for targeting healthcare organizations, claimed responsibility for the intrusion. DentaQuest reported that during this period, attackers accessed sensitive data including names, dates of birth, Social Security numbers, health plan information, and medical history details. The scope of the incident marks one of the largest exposures of patient records in recent years.

The breach was detected following an investigation into suspicious network activity. DentaQuest immediately engaged cybersecurity experts to secure its systems and notify affected individuals. In a statement released Monday morning, the company emphasized that no evidence suggests financial data or credit card numbers were compromised during the incident. However, the exposure of Social Security numbers and health records poses significant risks for identity theft and fraud among the millions impacted.

ShinyHunters has historically demanded ransom payments from targeted organizations in exchange for not releasing stolen data publicly. While DentaQuest did not disclose whether a payment was made or if any data had been posted on dark web marketplaces, the group typically threatens to leak information within days of claiming an attack. The company is currently cooperating with federal law enforcement agencies and state attorneys general as part of its response efforts.

Regulatory bodies have launched inquiries into how long the attackers remained undetected in DentaQuest's network before their activities were identified on May 20. Questions remain regarding whether other connected systems or third-party vendors may also be affected by the intrusion. The company has established a dedicated call center and website to assist individuals who believe they are victims of fraud stemming from this breach.

Dental insurance brokers, provider networks, and state health departments have been notified of the incident as part of DentaQuest's broader communication strategy. Legal experts warn that affected members may face prolonged monitoring requirements for their credit reports due to the nature of the compromised Social Security numbers.

As investigations continue, officials are working to determine if similar vulnerabilities exist across other healthcare benefit administrators using comparable infrastructure. The full extent of potential long-term consequences for patients and providers remains unclear as authorities assess whether additional data sets were targeted or exfiltrated beyond what was initially reported.