Absolute Dental Services
Disclosed Aug 21, 20233 years ago10,037 affectedConfirmed
The business associate (BA), Absolute Dental Services, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) of 10,037 individuals. The PHI involved included names, dates of birth, diagnoses and conditions, full face photos, and treatment information. The BA provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its website. In response to the breach, the BA implemented multi-factor authentication for all email accounts, increased password complexity requirements, and implemented procedures for clients to send PHI to the BA using a secure file share or secure portal, rather than email.
What is known
| People affected | 10,037 (as reported to HHS) |
|---|---|
| Disclosed | Aug 21, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Absolute Dental Services (Business Associate, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 21, 2023 | 10,037 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.