DentaQuest
Disclosed May 22, 20264 months ago27,400,000 affectedConfirmed
DentaQuest breach by ShinyHunters exposes Medicaid dental data of 15M+
Dental benefits administrator DentaQuest said attackers accessed its network May 17 to 20, 2026, exposing names, SSNs, Medicaid and Medicare numbers and dental health data. ShinyHunters leaked the data after failed negotiations; the confirmed count exceeds 15 million.
What is known
| People affected | 27,400,000 (as reported by the organization) |
|---|---|
| Disclosed | May 22, 2026 |
| Discovered | May 20, 2026 |
| Happened | May 17, 2026 |
| Attack | Extortion |
| Data exposed | Names, Social Security numbers, Health, Insurance, Dates of birth, Emails, Government IDs, Phone numbers, Addresses |
| Sector | Insurance · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: DentaQuestoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: DentaQuestatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: DentaQuestattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: DentaQuestjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: DentaQuest (Health Plan, MA)ocrportal.hhs.gov · Official notice | Official notice |
| DentaQuest disclosuredentaquest.com · The organization | The organization |
| Have I Been Pwned: DentaQuesthaveibeenpwned.com · Aggregator | Aggregator |
| DentaQuest data breach exposed info of 2.6 million accountsbleepingcomputer.com · News | News |
| DentaQuest data breachhipaajournal.com · News | News |
| Texas Attorney General data security breach report BR-0005182: DentaQuestoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| hhs-ocr-archivetotal | May 22 | 3,086 |
| Have I Been Pwnedaccounts in the data | Jun 3 | 2,553,599 |
| Researchtotal | Jun 4 | |
| California AGresidents of CA | Jul 16 | |
| Washington AGresidents of WA | Jul 16 | 148,300 |
| Oregon DOJresidents of OR | Jul 16 | 15,000,000 |
| HHS OCRtotal | Jul 16 | 15,000,000 |
| Delaware DOJresidents of DE | Jul 17 | 3,700 |
| tx-agresidents of TX | Jul 17 | 3,973,000 |
History of this record
- 2026-09-25 · disclosed: 2026-06-03 to 2026-05-22 · backfill source
- 2026-09-25 · source: empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage · backfill source
- 2026-09-25 · sector: health to insurance · seed source
- 2026-09-25 · attack: phishing to extortion · seed source
- 2026-09-25 · summary: In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data allegedly obtained from the company. Th to Dental benefits administrator DentaQuest said attackers accessed its network May 17 to 20, 2026, exposing names, SSNs, Medicaid and Medicare numbers and dental health data. ShinyHunters leaked the data after failed negotiations; the confirm · seed source
- 2026-09-25 · title: empty to DentaQuest breach by ShinyHunters exposes Medicaid dental data of 15M+ · seed source
- 2026-09-25 · hibp: empty to DentaQuest · backfill source
- 2026-09-25 · data_types: ["names","ssn","health","insurance"] to ["names","ssn","health","insurance","dob","emails","government-id","phone","addresses"] · backfill source
- 2026-09-25 · disclosed: 2026-07-16 to 2026-06-03 · backfill source
- 2026-09-25 · summary: empty to In May 2026, the dental benefits administrator DentaQuest was the target of a ShinyHunters "pay or leak" extortion campaign that resulted in the group publicly publishing hundreds of gigabytes of data allegedly obtained from the company. Th · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 27400000 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to phishing · backfill source
- 2026-09-25 · discovered: empty to 2026-05-20 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.