Las Vegas-based Absolute Dental provided notice of a data incident involving its information systems.
The dental practice discovered that an unauthorized party accessed some of its systems between Feb. 19 and March 5, according to the notice.
Third-party forensic investigators determined that the access originated from the accidental execution of a malicious version of a legitimate software tool, which occurred through an account associated with Absolute Dental’s third-party managed service provider.
Personal information that may have been affected by the breach includes contact information, dates of birth, Social Security numbers, driver’s license or state-issued ID information, passport or other governmental ID information and health information.
The practice has more than 50 locations across Nevada, according to its website.