Family Implant and Dentistry has reported a data breach to the Vermont Attorney General. The report, dated November 6, 2026, says three Vermont residents were affected and lists Social Security numbers and health records as the information involved.
Dental and medical practices keep detailed patient files, so an exposure at a practice can reach well beyond a name and an address.
Family Implant and Dentistry’s Data Breach Investigation
Family Implant and Dentistry appears on the Vermont Attorney General’s public list of security breach notices. Vermont requires organizations to tell the state when a breach involves a Vermont resident’s personal information, and the office posts a summary table of those reports. The entry is dated November 6, 2026, classifies the organization as health care, and reports three Vermont residents affected.
The entry lists two categories of information: Social Security numbers and health records. A Social Security number can be used for years to open credit in another person’s name or to file false tax returns. Health records are sensitive for a different reason. In a dental practice they can include treatment plans, imaging, notes about procedures, medications, insurance details, and billing information, none of which can be changed once exposed.
That is nearly all the public record says right now. The Vermont office no longer posts copies of the notice letters that organizations send to consumers, so there is no letter to read. The summary does not describe how the incident happened, which systems were involved, when an intruder got in, or when the practice found out. It also does not say where the practice is located. We searched for any other public information, such as a notice on a practice website or a report in another state, and found nothing we could tie to this filing. This page therefore does not guess at the cause or the location.
The figure of three is a state-level number. It counts only Vermont residents and is not a total for the incident. A practice that has patients in several states may file in each state when letters go out, and the number of people affected overall can be much higher than the number in any one state. Family Implant and Dentistry has not published a nationwide count, so the real scope is unknown. Vermont also notes that the numbers in its table can change as an organization finishes its review.
A patient can be affected even after leaving a practice, because dental offices keep records for years and often hold information about parents or guardians who handle billing for children. People who have been treated by a dental practice with a similar name should check the name on any letter they receive before assuming it relates to this filing.
Vermont’s breach law gives organizations a limited window to notify residents once they have determined that personal information was acquired, and most states set similar deadlines. A state filing is generally made close to the time letters are sent, which suggests that people who were affected may already have received a notice by mail or may receive one soon. Health care providers also face federal rules on breaches of health information, and larger incidents are reported to the federal government separately, but nothing in the Vermont entry says whether that has happened here.
Records like these are also useful to scammers. Someone who holds a real patient’s Social Security number and treatment information can write a message that sounds like it comes from the practice, an insurer, or a billing office, asking the person to confirm details or pay a balance. Anyone who gets an unexpected call, text, or email about their care after a notice like this should stop and use a phone number from the practice’s official materials, rather than the one in the message.
Until the practice says more, the details of this incident remain unconfirmed. This page reports only what the Vermont filing says, and it deliberately avoids guessing at anything the filing leaves out. It will be updated if better information becomes available.
When Did This Breach Occur?
The date of the underlying incident has not been disclosed. The only date in the public record is November 6, 2026, the date of the report on the Vermont Attorney General’s list.
The entry does not say when any unauthorized access began or ended, or when the practice first discovered it. Anyone who receives a notice should look for those dates in the letter itself.
What Information Was Breached?
The Vermont entry lists two categories of information: Social Security numbers and health records. The filing does not break health records down into specific items, such as treatment details, imaging, or insurance information, and it does not say whether every affected person had both categories involved.
Family Implant and Dentistry has not publicly said which data elements applied to each person. The notice you receive is the best source for that, because the specific items can differ from one person to the next.
What You Can Do
If you received a notice from Family Implant and Dentistry, or you think you may be affected, consider these steps.
- Read your notice carefully and keep it, along with the envelope and any reference number, so you have a record of what the practice told you.
- If the notice offers free credit monitoring or identity protection, enroll before the deadline listed in the letter.
- Review the explanation of benefits statements from your dental and health insurers and look for services, providers, or claims you do not recognize.
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for accounts or inquiries you did not authorize.
- Consider placing a free fraud alert or a security freeze with each of the three credit bureaus. A freeze can delay new credit applications, so plan ahead before you apply for a loan.
- Be cautious with calls, texts, and emails that mention your treatment or this incident, even if the sender seems to know personal details. Report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov.
File a Data Breach Lawsuit Against Family Implant and Dentistry
People whose Social Security numbers and health records are exposed in a data breach may have legal options if the practice failed to use reasonable safeguards to protect them. Whether a claim exists depends on the facts, including what information was involved, how the incident happened, and how the practice responded.
If you received a notice from Family Implant and Dentistry, or you believe your information was involved, you can speak with a lawyer about whether you may be able to join a class action lawsuit to seek compensation for the exposure of your information, the time you spent responding, and any losses you suffered.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
