Community Dental Care Agrees to Class Action Settlement Following December 2024 Patient Data Incident

Community Dental Care, one of the largest nonprofit dental care organizations in Minnesota, has agreed to a class action settlement to resolve allegations that it failed to protect patient personal and medical records during a December 2024 cyberattack.

The security breach affected approximately 130,583 current and former patients whose sensitive health details, full names, Social Security numbers, and financial information were compromised by unauthorized actors.

Under the terms of the settlement, affected patients can file a claim to receive up to $5,000 in cash reimbursement for out-of-pocket expenses, an alternative $50 flat cash payout, and two years of medical and credit identity protection. If you received a data breach notification notice regarding this incident, you may be eligible to submit a claim before upcoming court deadlines.

What Caused the December 2024 Community Dental Care Security Breach?

In December 2024, unauthorized bad actors breached internal computer networks at Community Dental Care, gaining access to confidential patient databases stored on company servers.

According to court filings in In re: Community Dental Care (Case No. 62-CV-25-2490), filed in the District Court for Ramsey County, Minnesota, cybercriminals accessed sensitive network files containing both personal identifying details and medical records.

The compromised files contained a broad range of sensitive patient information, including:

• Full names and dates of birth

• Social Security numbers

• Health insurance information and policy details

• Confidential medical histories and dental treatment records

Following an internal investigation, notifications were issued to affected patients. Class action lawsuits were subsequently consolidated in Minnesota state court, alleging that Community Dental Care failed to implement modern cybersecurity defenses to prevent foreseeable cyber intrusions.

What Allegations Were Raised in the Class Action Lawsuit?

The class action lawsuit alleged that Community Dental Care failed to uphold basic standards of data privacy and omitted industry-standard administrative and technical security measures.

Key legal claims raised by the plaintiffs included:

• Failure to Safeguard Protected Records: Failing to implement firewalls, data encryption, and access controls needed to block network intrusions.

• Heightened Risk of Fraud: Exposing current and former patients to medical identity theft, falsified insurance claims, and financial account fraud.

• Preventable Costs and Inconvenience: Forcing victims to spend time and money monitoring bank accounts, placing credit freezes, and securing personal identity profiles.

Community Dental Care denies all allegations of wrongdoing and maintains that its cybersecurity measures were appropriate. However, to avoid the high costs, delay, and uncertainty of ongoing litigation, the organization agreed to a class action settlement structure to resolve all pending claims.

What Compensation and Benefits Can You Claim From the Settlement?

Eligible class members can choose between two cash settlement payment structures based on their individual situation, along with access to specialized identity protection tools.

1. Documented Out-of-Pocket Expense Reimbursement (Up to $5,000)

Class members who suffered documented financial losses directly resulting from the December 2024 breach can claim up to $5,000 in cash reimbursement. Eligible expenses incurred between December 20, 2024, and October 19, 2026, include:

• Financial losses caused by identity theft or fraudulent account activity.

• Fees paid for credit monitoring services, credit reports, or credit freezes and unfreezes.

• Costs for replacement government-issued identification cards or driver’s licenses.

• Postage, notarization, and communication expenses incurred while resolving fraud claims.

To claim out-of-pocket reimbursement, you must attach supporting documentation, such as bank statements, receipts, credit bureau notifications, or fraud police reports, verifying your financial losses.

2. Alternative Flat Cash Payment ($50)

If you did not incur out-of-pocket financial expenses or do not have receipts, you can choose an alternative flat cash payment of $50 instead. No proof of financial loss or receipts are required to receive this cash benefit.

3. Two Years of CyEx Medical Shield Complete Monitoring

All class members, regardless of whether they choose out-of-pocket expense reimbursement or the flat cash option, are eligible to receive two years of complimentary CyEx Medical Shield Complete monitoring. This identity service includes:

• $1 million in medical identity theft insurance coverage

• Active monitoring for Healthcare Insurance ID and Medical Record Number (MRN) exposure

• Real-time alerts for unauthorized Health Savings Account (HSA) spending

• Dedicated access to fraud resolution agents to assist with identity recovery

Understanding Patient Rights Under Healthcare Data Privacy Laws

Federal frameworks such as the Health Insurance Portability and Accountability Act (HIPAA), along with state consumer privacy statutes, require healthcare providers and medical organizations to implement reasonable security safeguards to protect patient health records.

When a healthcare provider collects confidential details—such as Social Security numbers, health insurance numbers, and treatment histories—it assumes a strict obligation to defend those files against unauthorized access.

Compromised health records carry serious risks, including medical identity theft, where bad actors submit falsified medical claims or tamper with insurance records. Class action lawsuits allow everyday citizens to join together, hold corporate entities accountable for security oversights, and secure financial recovery for their losses.

Who Is Eligible to File a Claim for Benefits?

You may be eligible to participate as a class member if you reside in the United States and received a written or electronic notice stating that your personal or medical information was potentially compromised during the December 2024 Community Dental Care data incident.

The settlement class covers approximately 130,583 individuals whose personal details were maintained on affected company systems.

If you need to verify your eligibility or request your claim credentials, you can contact the official settlement administrator:

• Settlement Portal: CDDataBreach.com

• Administrator: CD Data Breach Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958

• Toll-Free Phone: [SETTLEMENT ADMINISTRATOR PHONE]

• Email: [SETTLEMENT ADMINISTRATOR EMAIL]

Critical Deadlines and Upcoming Court Approval Dates

To receive financial compensation or protect your legal rights regarding this security incident, you must pay attention to several court-ordered deadlines:

If you take no action, you will forfeit your right to claim cash reimbursement or credit monitoring, and you will give up your legal right to participate in future lawsuits against Community Dental Care regarding this incident.

Step-by-Step Instructions on How to Submit Your Claim

Submitting a claim is simple and can be completed online or by mail before the October 19, 2026 deadline:

1. Visit the Official Settlement Site: Go to CDDataBreach.com.

2. Access Your Claim Form: Enter the unique Login ID and PIN located on the settlement notice postcard mailed to you. If you misplaced your notice, you can complete the online form using your personal details.

3. Select Your Payout Option: Choose whether you are requesting up to $5,000 for documented out-of-pocket expenses or selecting the alternative $50 flat cash payment.

4. Upload Proof (If Claiming Expenses): If claiming out-of-pocket losses, attach photos or digital copies of receipts, bank notices, or credit bureau statements documenting your costs.

5. Select Preferred Payment Delivery: Choose how you wish to receive your settlement funds—via digital payment (such as Zelle or PayPal) or physical paper check.

6. Submit Before Deadline: Complete your digital submission online by 11:59 p.m. on October 19, 2026, or ensure paper claim forms are postmarked by October 19, 2026.

Hold Corporations Accountable: Claim Your Payout Today

Everyday people trust medical and dental providers with their most sensitive health records and personal information. When security vulnerabilities expose patient files to cybercriminals, consumers should not have to carry the financial burden of identity defense alone.

Don’t stand alone. If your personal information was exposed in the December 2024 Community Dental Care security incident, take a few minutes to submit your claim before the October 19, 2026 deadline.