On February 7, 2024, Dental Health Services experienced an unintended exposure of sensitive customer data. The incident involved the accidental emailing of encrypted monthly invoices to various employer group customers. Unfortunately, the encryption password was also sent in a separate email, potentially allowing unauthorized access to the information contained within the invoices.
The data exposed included personal details such as members' names, dates of birth, member identification numbers, eligibility dates, plan types, and premium amounts due. While the invoices were password-protected, the inadvertent sharing of the encryption password constituted a data breach.
Upon discovering the error, Dental Health Services took immediate action to investigate and contain the breach. They have confirmed with all recipients that the incorrect invoices have been destroyed. Furthermore, the company has implemented internal remedial measures to prevent a recurrence of such an incident.
The information involved in the breach was both personal and financial in nature, including:
As of now, there is no evidence to suggest that the exposed information has been used for identity theft or fraudulent activities.
Dental Health Services has taken several steps to address the breach and bolster their data protection strategies. These include:
If you believe you may have been affected by this breach, it is important to remain vigilant. Here are some steps you can take:
Dental Health Services is committed to the privacy and security of your personal information. Should you have any questions or require further assistance, they are available Monday through Friday, from 8:00 a.m. to 5:00 p.m. Pacific Time at 866-693-0143.
The company extends its sincerest apologies for any inconvenience or concern this incident may have caused. They assure their members that safeguarding their personal information remains a top priority.
For the full disclosure of the data breach, you can visit the California Attorney General's website at Dental Health Services Data Breach Report.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.