Here are 12 updates on dental cybersecurity incidents from 2025, including new data breaches, lawsuit settlements and investigations:
1. Olde Towne Medical and Dental Center in Williamsburg, Va., suffered a ransomware incident affecting 2,567 individuals.
2. Upper Dublin Family Dentistry in Willow Grove, Pa., experienced a data breach affecting 5,000 individuals.
3. In May, The Aspen Group agreed to settle a class-action lawsuit, filed in response to an April 2023 data breach, for $4.4 million.
4. Minnesota Orthodontics and Dentofacial Orthopedics suffered a hacking incident affecting about 500 individuals.
5. Community Dental Care, a nonprofit dental clinic with five locations throughout Minnesota, recently suffered a data breach that involved patient information.
6. Nashville, Tenn.-based Chord Specialty Dental Partners experienced a data security incident affecting more than 173,000 individuals. Several law firms launched investigations into the breach this year.
7. Rinehart Dentistry in Georgetown, S.C., experienced a data breach affecting 25,000 individuals.
8. Artistic Family Dental, a three-office practice in Illinois, was the victim of cyber attack that led to the potential breach of information for nearly 4,000 individuals.
9. A class-action lawsuit was filed against OrthoMinds, a provider of orthodontic practice management software, alleging that the company failed to properly safeguard protected health information after it experienced a data breach last year.
10. Arlington, Texas-based Park Place Pediatric Dentistry & Orthodontics announced that it experienced a mobile device theft. Information on the laptop that may have been exposed to an unauthorized party includes names, patient account numbers, dates of birth, dates of service, medical treatment records and financial information related to treatment.
11. Hapy Bear Surgery Center, a pediatric dental surgery center in Tulare, Calif., agreed to a class action lawsuit settlement to resolve claims that it failed to protect patient data.
12. Westend Dental in Indianapolis agreed to pay $350,000 to settle a lawsuit brought by the state following a ransomware attack and unauthorized access to patient information.
