Mysa Dental Data Breach: Health Information Exposed

Mysa Dental, a family dental clinic in San Antonio, Texas, disclosed a data breach. The practice is part of Soniva Dental Care, which experienced a ransomware attack that affected at least 30,000 Texans.

The breach was disclosed to the Texas Attorney General, with 3,394 Texas residents identified as affected by Mysa Dental's filing. Mysa Dental posted a notice on its website to inform patients about the incident.

On May 26, 2026, Mysa Dental was informed by its IT support company that it had identified irregularities related to remote access session hosts

Once the irregularities were classified as an attack, the IT team began working to contain the damage. They locked down external access to the remote desktop web services infrastructure and made sure all external connections were terminated. At the same time, all user accounts with access to the remote desktop system were disabled, and an office-wide password reset was required.

After the response, the patient record platform was restored, and the practice's archive data was not affected by the attack. The company's investigation determined that certain personal information of patients associated with the practice might have been accessed or compromised during the incident.

The types of personally identifiable information that may have been exposed included names, addresses, dates of birth, driver's license numbers and government-issued ID numbers such as passports or state ID cards.

The breach also may have exposed protected health information, including medical information and health insurance information.

The notification stated that payment information and dental care provided to patients was not impacted.

Mysa Dental's response to the breach

The company is offering complimentary identity protection monitoring services at no cost to affected patients. This type of monitoring can help patients spot potential misuse of their personal data at an early stage.

Patients who would like to enroll in the free identity protection monitoring or who have questions about the breach can call the company's toll-free number at 844-473-3900.