US dental benefits administrator DentaQuest breached by ShinyHunters; health and identity data of at least 15 million exposed

According to The HIPAA Journal, US dental benefits administrator DentaQuest's network was accessed without authorization between May 17 and 20, 2026; the company says at least 15 million people are affected, with names, addresses, SSNs, Medicaid and Medicare numbers and dental or vision health information involved ^[1]. According to Cybernews, ShinyHunters claimed to steal over 234GB and published the cache on May 30 after negotiations failed, and a researcher found 1.7 million unique SSNs, most appearing to belong to children ^[2]. DentaQuest began mailing notices on July 17 offering 24 months of free credit monitoring and identity theft protection, which The HIPAA Journal says affected individuals should use since the data has leaked ^[1].

Industries mainly affected: Healthcare

1. If notified by DentaQuest, enroll in the 24 months of free credit monitoring and identity theft protection ^[1].