DentaQuest dentaquest.com DentaQuest data breach: what happened and what to do
In May 2026, dental benefits administrator DentaQuest was hit by a ShinyHunters extortion campaign, and the group published the data. Have I Been Pwned counts 2.6 million email addresses, with names, phone numbers, addresses, dates of birth, health insurance details and government IDs.
View all 13,115 breaches- Breach date
- 23 May 2026
- Affected
- 2,553,599
- Data exposed
- Dates of birth, Email addresses, Genders, Government issued IDs, Health insurance information, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
DentaQuest administers dental and vision benefits, often for state Medicaid programs and health plans. In May 2026 the ShinyHunters group ran a "pay or leak" extortion campaign against the company. When no deal was struck, the group published hundreds of gigabytes of data it said it took from DentaQuest.
According to filings and notices reported by HIPAA Journal, DentaQuest discovered the intrusion on May 20, 2026. Investigators traced it to a social engineering attack that captured an employee's credentials and a multi-factor code. DentaQuest told people it had contained the attack and mitigated the threat, and its own security update describes unauthorized access to a limited portion of its network. Notification letters began going out in July 2026, with 24 months of identity monitoring offered, according to a health plan notice that quotes the letter.
How many people
Have I Been Pwned counted 2,553,599 unique email addresses in the published files, about 2.6 million. That is a count of email addresses, not of people. Much of the leaked material sat in healthcare enrollment files, and many members in those files have no email address on record. Reports on the number of people affected have been higher than the email count and have been revised since the disclosure, so treat 2.6 million as the floor for what was published.
What was exposed
Have I Been Pwned lists names, email addresses, phone numbers, physical addresses, dates of birth, genders, health insurance information and government issued IDs. Some of the enrollment records carried Medicaid IDs. The company's notices go further than the published sample: letters filed with state regulators mention Social Security numbers and dental or vision details such as diagnoses and billing information for some people.
What that lets criminals do
Names, addresses and dates of birth together are what identity thieves need to open accounts or file fraudulent claims. A Social Security number or Medicaid ID adds medical identity theft: someone using your coverage to get care or bill for services you never received. Email addresses and phone numbers give scammers a way in, and a message that mentions DentaQuest or your dental plan is far more convincing than a generic one.
Expect emails and texts that claim to be from your plan, offering a "benefit update" or asking you to confirm your member ID. They will look right because the sender knows real details.
The company's response
DentaQuest says it contained the attack, brought in outside investigators and added security measures and staff training. It offered affected people 24 months of identity monitoring through Kroll. If you got a letter, the monitoring is free and worth activating.
If you never got a letter
Letters went to people DentaQuest identified from its own records. The published files came from the group, and Have I Been Pwned's list may include people who have not been mailed yet. Search your email on Have I Been Pwned, and read any message from your health plan or state Medicaid office with the leaked data types in mind.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
Dates of birth, addresses and in some cases Social Security numbers were exposed. A freeze at Equifax, Experian and TransUnion is free and stops most new accounts being opened in your name.
- 2
Read your explanation of benefits statements
Medicaid IDs and insurance details were in the files. Look for treatment, claims or providers you don't recognize, and call your plan if something is off.
- 3
Take the free identity monitoring if you got a letter
DentaQuest offered 24 months of monitoring through Kroll. The enrollment instructions and code are in the letter.
- 4
Treat messages about your dental plan with suspicion
Phishing and text scams that mention DentaQuest or your plan are likely. Don't click links or call numbers in the message. Use the number on your member card.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears. It can't take data out of a breach, but it shows you what leaked and what to do about it.
Frequently asked
Was I affected by the DentaQuest breach?
If you were a member of a plan DentaQuest administers, possibly. People DentaQuest identified are being sent letters. You can also search your email on Have I Been Pwned, which holds 2.6 million email addresses from the published data.
What was exposed in the DentaQuest breach?
Have I Been Pwned lists names, email addresses, phone numbers, physical addresses, dates of birth, genders, health insurance information and government issued IDs. Notices to regulators also mention Social Security numbers and dental or vision details for some people.
Should I change my password?
Passwords are not listed among the exposed data. The attack started with a stolen employee login, not member accounts. If you reuse passwords, changing them is still a good habit after any breach.
Does DentaQuest offer credit monitoring?
Yes. Notification letters offer 24 months of identity monitoring through Kroll, according to a health plan notice that quotes the letter.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
