Stafford Oral Surgery Data Breach Exposes Personal and Medical Information

Stafford Oral Surgery P.C., an oral and maxillofacial surgery practice based in Stafford, Virginia, disclosed a data breach connected to a cyber incident at one of its vendors. The practice, which operates as Stafford Oral Surgery & Specialists, serves patients in the Stafford area who need oral surgery, dental implants, wisdom teeth removal and other jaw and facial procedures. The breach impacted 7,019 individuals in the United States.

Between Oct. 15 and Oct. 23, 2025, a cyber incident occurred at one of Stafford Oral Surgery's vendors. During that time, an unauthorized party gained access to a limited amount of patient information contained in a few email accounts and vendor files.

Stafford Oral Surgery stated that the unauthorized access was limited to the vendor's email accounts and files.

The types of personal information potentially exposed varied from person to person but may have included names, addresses, medical information and/or health insurance information.

Stafford Oral Surgery posted a notice on its website providing details about the incident and guidance for those who may be affected.

Stafford Oral Surgery's response to the breach

Stafford Oral Surgery mailed notice letters to all identified individuals whose information may have been affected by the incident.

The practice is offering complimentary credit monitoring and identity theft protection services through Experian to those who may be affected. Enrollment instructions and a personal enrollment code were included in the notice letters mailed to individuals.

Affected individuals who have questions about the incident, the notice or the steps they should take can call a dedicated toll-free number at 833-918-6270. The line is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.