On May 27, 2025, Northwest Denture Center Inc. (NDC), based in Burlington, Wash., experienced a data breach that affected at least 19,419 individuals. According to a notice filed with the Washington Attorney General, NDC discovered suspicious activity on its network on May 28 and immediately began an investigation. Affected individuals include 12,209 Washington residents.
To assess the impact, NDC conducted an extensive review of the compromised files, which was completed by June 27. The review revealed that the exposed information included a combination of personally identifiable information (PII) and protected health information (PHI): names, Social Security numbers, driver’s license or Washington ID card numbers, full dates of birth and medical information.
The combination of Social Security numbers, identification numbers and medical information can increase the risk of identity theft and medical fraud for those affected. NDC has not disclosed the specific method used by the unauthorized party to gain access, nor has it identified the responsible party.
For more details, the official disclosure can be found in the Washington Attorney General’s data breach notification. The data breach was also reported to the U.S. Department of Health and Human Services on July 25, 2025.
To support those impacted, NDC is offering 12 months of complimentary credit monitoring and identity theft protection services through TransUnion. Affected individuals received written notice with instructions on how to enroll in these services, as well as guidance on protecting against identity theft and fraud.
This includes information on how to place fraud alerts and security freezes on credit files, contact details for the three major credit bureaus and reminders to monitor account statements and credit reports for suspicious activity.
It is important for affected individuals to:
For more information about the company, visit the Northwest Denture Center website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.