Birmingham, Ala.-based Just Kids Dental recently experienced a cyberattack affecting 129,463 people.
The dental practice said Aug. 2 a program was used to encrypt its computer systems and data, including systems used to store patient and employee files. The practice discovered the incident Aug. 8, according to a Sept. 1 notice from the practice.
The practice submitted the incident Sept. 27 to the U.S. Department of Health and Human Services Office for Civil Rights Breach Portal.
Information that may have been accessed includes contact and identifying information, health insurance information, and records of patients and their parents or guardians. It could also include personal information and licensing numbers for current and former employees. The practice said no banking or credit card information was accessed.
The practice said it was told by the malicious actor responsible for the incident that the data was deleted and not distributed. The practice added that it has taken steps to restore its systems and strengthen its security measures.
Two law firms, Console & Associates and Markovits, Stock & DeMarco, announced in September that they were investigating the incident on behalf of affected individuals.