Hood River Dental Data Breach Affects 16,609 Patients

Hood River Dental, a family-owned dental practice in Hood River, Oregon, disclosed a data breach that affected approximately 16,609 individuals in the United States.

Hood River Dental experienced two separate cybersecurity incidents that may have led to unauthorized access to patient and personal information.

The first incident occurred on or about Oct. 22, 2025, and affected certain systems within the practice's network environment. After discovering this incident, the practice took steps to evaluate and secure its systems and networks.

Despite those initial security efforts, a second cybersecurity incident occurred on or about Jan. 15, 2026. The occurrence of two incidents in a relatively short period led the practice to launch a comprehensive investigation into both events to determine their full scope and impact.

The types of personally identifiable information (PII) potentially exposed included names, dates of birth, financial account information, payment card information, driver's license numbers and Social Security numbers.

Protected health information (PHI) was also potentially compromised, including medical record numbers, medical and patient ID account numbers, medical diagnosis and treatment information and health insurance information.

The breach was disclosed on Oct. 8, 2026, to the attorneys general of Massachusetts and Oregon, as well as the U.S. Department of Health and Human Services. The company also posted a notice of the incidents on its website.

Hood River Dental began notifying consumers on Oct. 8, 2026.

Hood River Dental's response to the breach

The company established a dedicated toll-free call center at 1-888-940-8885 for individuals with questions about the incidents. The call center is available Monday through Friday, 8 a.m. to 8 p.m. Eastern Time, excluding holidays.

Individuals who did not receive a notification letter but would like to know if they are potentially affected may also call this number for assistance.