Absolute Dental Group

Disclosed May 2, 20251,223,635 affectedSettled

MSP account used to breach Absolute Dental, exposing 1.2M patients

Nevada dental chain Absolute Dental said attackers used an account of its managed service provider Judge Consulting to access its network between February 19 and March 5, 2025, exposing SSNs, license numbers, health and financial data of 1,223,635 people; it settled for $3.3 million.

What is known

People affected	1,223,635 (as reported to HHS)
Disclosed	May 2, 2025
Discovered	Feb 26, 2025
Happened	Feb 19, 2025
Attack	Vendor breach
Data exposed	NamesHealthSocial Security numbersGovernment IDsInsuranceFinancial
Sector	Healthcare · US
Status	Settled
Lawsuit or fine	$3.3M class action settlement (2026)

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Absolute Dental Group

Official noticeatg.wa.gov

Washington Attorney General breach notice: Absolute Dental Group

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Absolute Dental Group

Official noticeocrportal.hhs.gov

HHS OCR breach report: Absolute Dental Group (Business Associate, NV)

Newshipaajournal.com

Absolute Dental Settles Class Action Data Breach Lawsuit for $3.3M

Newshipaajournal.com

Largest Healthcare Data Breaches of 2025

Newshipaajournal.com

May 2025 Healthcare Data Breach Report

Notices filed

TotalMay 2, 2025

HHS OCR1,223,635 people

TotalJun 26, 2025

Research1,223,635 people

Residents of CAAug 26, 2025

California AGCount not stated

Residents of WAAug 26, 2025

Washington AG1,001 people

Residents of ORAug 26, 2025

Oregon DOJ1,223,635 people

History of this record

status2026-09-25

confirmed to settledby seedSource

lawsuit2026-09-25

empty to $3.3M class action settlement (2026)by seedSource

attack2026-09-25

ransomware to third-partyby seedSource

data_types2026-09-25

["names","health"] to ["names","health","ssn","government-id","insurance","financial"]by seedSource

summary2026-09-25

empty to Nevada dental chain Absolute Dental said attackers used an account of its managed service provider Judge Consulting to access its network between February 19 and March 5, 2025, exposing SSNs, license numbers, health and financial data of 1,by seedSource

title2026-09-25

empty to MSP account used to breach Absolute Dental, exposing 1.2M patientsby seedSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 1223635by backfillSource

disclosed2026-09-25

2025-08-26 to 2025-05-02by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2025-02-26by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Absolute Dental Group