Update (Nov 11, 2026): DentaQuest has since confirmed the breach. In filings with the Iowa Attorney General, the company said a social engineering attack tricked a single employee into providing their credentials and a multifactor authentication code, and that the attacker accessed and exfiltrated data from DentaQuest network file shares between May 17 and May 19, 2026. DentaQuest said it discovered the incident on May 20, informed the FBI on May 21 and learned on May 29 that the data had been posted online. In an October 27, 2026 update, DentaQuest said its review was complete and that just over 29 million people nationwide had protected health information or personal information accessed. Depending on the person, the data included names, dates of birth, Social Security numbers, Medicare and Medicaid ID numbers, health plan numbers and dental or vision diagnosis, treatment and billing information. DentaQuest began mailing notices on July 17, 2026 and is offering 2 years of credit and identity monitoring through Kroll. Have I Been Pwned separately added 2.6 million unique email addresses from the leaked data. Consolidated class action litigation, In re: DentaQuest Group, Inc. Data Incident Litigation, No. 1:26-cv-12458, is pending in the U.S. District Court for the District of Massachusetts; the claims have not been proven in court. See our guides on what to do if your Social Security number was exposed and what to do if your medical information was exposed.
ShinyHunters claims it has released data allegedly stolen from DentaQuest after negotiations with the dental benefits provider reportedly failed.
The threat actor updated its listing for DentaQuest, stating that the company failed to reach an agreement and alleging that more than 234 GB of data has now been published. BreachNews has not independently verified the authenticity, contents, or scope of the purported dataset.
The development follows BreachNews’ earlier reporting on ShinyHunters’ addition of DentaQuest, Charter Communications, and Baker Distributing to its extortion site, where the group threatened to leak allegedly stolen information if negotiations were unsuccessful.
Latest development in ongoing extortion campaign
DentaQuest appeared on the group’s leak site on May 22 alongside several other organizations targeted as part of an ongoing extortion campaign. At the time, the listing did not include a record count but alleged that sensitive internal data had been accessed.
The original post included a deadline for negotiations and warned that data would allegedly be released if an agreement could not be reached. The latest update suggests the threat actor has now followed through on that threat.
Unlike some of the group’s other recent claims, ShinyHunters has not publicly disclosed a specific record count for the DentaQuest data. Instead, the group claims the release contains more than 234 GB of compressed information.
DentaQuest has not publicly addressed the claim
DentaQuest had not issued any public statement regarding the alleged breach at the time of publication.
The company provides dental benefits administration and oral healthcare services across the United States and manages dental coverage programs for millions of members through commercial, government, and Medicaid-related plans.
Because no samples or independent analysis of the purported data have been publicly verified by BreachNews, it remains unclear what information may be contained within the alleged release.
Follows Charter data release claim
The DentaQuest update comes shortly after ShinyHunters claimed it had also released data allegedly stolen from Charter Communications following failed negotiations.
In that case, Charter subsequently confirmed it had experienced unauthorized access linked to activity claimed by the threat actor while disputing allegations that sensitive customer information or Customer Proprietary Network Information (CPNI) had been exfiltrated. BreachNews recently reported on the alleged release of Charter data following failed negotiations.
Whether DentaQuest experienced a similar intrusion remains unconfirmed. No public statement from the company addressing ShinyHunters’ claims was identified at the time of publication.
As with other extortion-related claims, the publication of alleged data does not by itself confirm the scope, authenticity, or origin of the material. Additional analysis or a response from DentaQuest may provide further clarity regarding the incident.
