Keep Smiling Dental Group Data Breach Exposes PHI and PII

Keep Smiling Dental Group, a privately owned family dental practice based in Beavercreek, Ohio, disclosed a data breach involving its computer systems and patient files.

The company posted a notice of the data event on its website, detailing the incident.

After detecting a disruption on Sept. 7, 2026, the company took steps to confirm the security of its systems and began a thorough investigation to determine the nature and scope of the event.

The investigation confirmed the disruption was the result of a cybersecurity incident. Between Aug. 29, 2026, and Sept. 5, 2026, certain files were accessed or taken from the company's network.

After completing the initial investigation, Keep Smiling Dental Group undertook a review of the files that were affected to determine what specific information was involved in the incident and to identify the individuals whose data may have been compromised.

The types of information exposed varied by individual but may include names, Social Security numbers, patient IDs, dates of birth or age, contact information (such as addresses, phone numbers or email addresses), dental insurance information, dental account and billing information (such as account balances and treatment charges), dental records (including X-rays, treatment plans and clinical notes), medical history and appointment or schedule information.

Keep Smiling Dental Group's response to the breach

In its notice, the company provided resources to help affected individuals protect themselves, including contact information for the three major credit reporting bureaus and the Federal Trade Commission.

Keep Smiling Dental Group established a dedicated call center to answer questions about the incident. Individuals can reach the call center at 1-833-918-1289, available from 9 a.m. to 9 p.m. ET, Monday through Friday.

Individuals may also contact the dental practice directly at 1-937-436-2018.