Massachusetts Dental Firm Hit With Class Action Lawsuit Over Data Breach Affecting 15,000,000 Patients

A dental benefits provider is facing a class action lawsuit over a cybersecurity incident that allegedly exposed sensitive personal and health data belonging to millions of patients.

The complaint says DentaQuest failed to meet regulatory and industry standards for protecting records, including training staff on phishing and using multi-factor authentication.

Plaintiff Amanda Whitlow filed the suit in U.S. District Court for the District of Massachusetts.

The lawsuit claims unauthorized parties accessed names, addresses, Social Security numbers, member identification numbers, Medicaid and Medicare numbers, plus dental and vision health details such as diagnoses, treatments and billing information.

DentaQuest discovered the activity on May 20th after the incident ran from May 17th to May 20th, and began notifying affected individuals in July.

According to the company notice, more than 15 million people nationwide had protected health information accessed.

The suit alleges negligence, breach of implied contract, breach of fiduciary duty, unjust enrichment and violation of the Illinois Personal Information Protection Act.

… Continue reading the full article at the original source below.