Keep Smiling Dental Group Data Breach Investigation
Keep Smiling Dental Group reported a cybersecurity incident that may have involved personal, dental, insurance, and, for a limited number of people, Social Security information. The dental practice says it is notifying potentially involved individuals and is not aware of identity theft or fraud related to the event. Strauss Borrelli PLLC is investigating the incident and the rights of people whose information may have been affected. If you received a notice, you can fill out the secure contact form on this page to ask whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Keep Smiling Dental Group (Healthcare)
- Incident Type: Reported cybersecurity incident involving unauthorized access to or removal of files
- Date of Incident: August 29, 2026, to September 5, 2026
- Discovery Date: September 7, 2026
- Official Notice Date: Not stated in the available public notice
- Exposed Information: Names, patient IDs, dates of birth or ages, contact details, dental insurance information, dental billing information, dental and medical records, appointment information, and some Social Security numbers
- Affected Population: Not publicly stated; the practice reported that it was assessing which individuals were involved
What Happened?
According to Keep Smiling Dental Group’s consumer notice, the practice experienced a network disruption affecting certain computer systems and files. The notice reports that certain files were accessed or taken from its network between August 29, 2026, and September 5, 2026. The practice says it first identified activity related to the event on September 7, 2026, secured its network, and began investigating the incident’s nature and scope.
The practice reports that it completed a review of the files and is assessing which individuals were involved while locating addresses for direct notification. It also says it implemented server-wide security enhancements, added phishing-awareness training, reviewed existing security policies, and reported the event to the FBI. The notice states that the practice was not aware of identity theft or fraud connected to the event when it published the notice. The available notice does not identify a third-party vendor or state how many people may be affected.
What Information Was Exposed?
Keep Smiling Dental Group reports that the information involved varies by person and may include:
- Names, patient IDs, dates of birth or ages, and contact details;
- Dental insurance, account, and billing information, including balances and treatment charges;
- Dental records, including X-rays, treatment plans, and clinical notes;
- Medical histories and appointment or schedule information; and
- Social Security numbers for a limited number of individuals.
These data categories could be used in medical identity theft, fraudulent patient billing, insurance-verification scams, or targeted phishing. Their reported involvement does not mean misuse occurred, and the practice says it was not aware of related identity theft or fraud when it issued its notice.
What Should You Do Next?
- Review your notice carefully: Confirm which information the practice says may have been involved and follow any instructions provided specifically to you. Keep the notice in a secure place.
- Check insurance and healthcare records: Review explanations of benefits, dental bills, patient portals, and insurance claims for unfamiliar providers, treatments, prescriptions, or charges. Promptly dispute suspicious activity with the provider and insurer.
- Monitor your credit: Obtain free credit reports through AnnualCreditReport.com and look for unfamiliar accounts or inquiries. If your Social Security number may have been involved, consider placing free credit freezes with Equifax, Experian, and TransUnion.
- Watch for impersonation attempts: Be cautious of calls, emails, or text messages requesting passwords, Social Security numbers, insurance details, or payments. Verify communications using a phone number you independently confirm.
- Document suspected misuse: Preserve notices, screenshots, bills, credit reports, and correspondence. Report suspicious healthcare activity to the relevant provider or insurer and identity theft through IdentityTheft.gov when appropriate.
Your Legal Rights
People whose information may have been involved could have rights under federal or state privacy, consumer-protection, or data-breach laws. The rights and potential remedies available depend on factors such as the information involved, applicable law, notice provided, security practices, and whether a person experienced identity theft, fraudulent charges, lost time, or other harm.
Consumers also generally have the right to obtain free credit reports and to place or lift credit freezes without charge. Receiving a notice does not automatically establish a legal claim, and not receiving one does not necessarily mean a person was unaffected. An attorney can review the available facts, documents, and applicable deadlines. This general information is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
The firm represents consumers in privacy and cybersecurity matters and can assess whether the facts surrounding this reported incident may support a claim. A review may address the type of information involved, the notice you received, documented losses or suspicious activity, and laws that may apply. Contacting counsel can also help you understand possible deadlines and preserve relevant records. No outcome is guaranteed, and any evaluation depends on the individual circumstances.
If you received a breach notification letter from Keep Smiling Dental Group:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
