Agave Dental Data Breach Impacts Nearly 12,000 Patients: PHI and PII Exposed

Agave Dental, a general and cosmetic dental practice located at 2006 10th St. in Floresville, Texas, disclosed a data breach that may have compromised the personal and medical information of 11,790 Texas residents.

On May 26, 2026, Agave Dental was informed by its IT support company that irregularities had been identified related to remote access session hosts. Within a few short minutes of the discovery, it became clear that an attack had occurred on the practice's systems.

Once the attack was identified, the IT team's primary focus shifted to containing the incident. The team locked down external access to the practice's remote desktop web services infrastructure and worked to make sure all external connections to the system were terminated. At the same time, the practice disabled every account that had access to remote desktop web services and forced an office-wide password reset to help prevent further unauthorized access.

The practice confirmed that its archive data was not affected by the attack.

Through the investigation that followed, supported by the practice's IT support company, the practice sought to determine whether and what types of patient information had been compromised during the unauthorized access.

The personally identifiable information that may have been compromised included names, addresses, dates of birth, driver's license numbers and government-issued identification numbers such as passports or state ID cards. The protected health information that may have been accessed included medical information and health insurance information.

The incident did not affect payment information or the dental care that was provided to patients.

Agave Dental posted a on notice on its website, informing patients of the incident.

Agave Dental's response to the breach

Agave Dental is offering complimentary identity protection monitoring services to affected individuals. These services are designed to help patients keep watch over their personal information for signs of potential misuse.

Patients who wish to enroll in these services can call the practice toll-free at 844-473-3900. The toll-free line is also available for anyone who has questions or concerns about the incident.