Azle Smiles, a dental practice based in Azle, Texas, has notified the Texas Attorney General of a data security incident that may have exposed sensitive personal and medical information belonging to thousands of patients. Companies that handle sensitive health data have a responsibility to protect it from unauthorized access.
Azle Smiles’s Data Breach Investigation
According to a filing submitted to the Texas Office of the Attorney General and published on July 28, 2026, Azle Smiles disclosed a data security incident affecting 9,444 Texas residents. The categories of information reportedly involved include names, addresses, driver’s license numbers, government-issued identification numbers, medical information, health insurance information, and dates of birth. Azle Smiles stated in its filing that it notified affected individuals through a combination of methods, including publication notice in print media, posting information on its own website, direct mail, and email.
The Texas Attorney General’s data security breach reporting portal, where this notice was published, requires companies doing business in the state to disclose breaches affecting Texas residents, but it does not always include a detailed narrative describing how an incident occurred, when it was first discovered, or how it was ultimately resolved. As of this notice’s publication, Azle Smiles has not released additional public information about the incident beyond what appears in the state filing.
Dental practices, like many other healthcare-adjacent businesses, have become increasingly attractive targets for cybercriminals because of the breadth of sensitive information they routinely store. A dental office’s records often include not just clinical treatment history, but also insurance details, billing and payment information, and government identification used to verify a patient’s identity. This combination of data creates a concentrated target that can be exploited in multiple ways by criminals, from opening fraudulent credit accounts to submitting false insurance claims.
Smaller, independently operated dental and medical practices are frequently viewed by cybercriminals as easier targets than large hospital systems, since these smaller offices may not always have the same level of dedicated cybersecurity staffing or infrastructure, even though the sensitivity of the data they hold is comparable. The exposure of government-issued identification numbers alongside medical and health insurance information, as reported in this incident, is a particularly concerning combination because it can enable both traditional identity theft and medical identity theft, in which a criminal uses a victim’s insurance benefits to obtain treatment or medical equipment fraudulently.
Unlike a compromised credit card number, which can typically be canceled and reissued fairly quickly, identification numbers and dates of birth cannot simply be changed once exposed. This means the risk of misuse from an incident like this one can extend well beyond the initial notification period, and affected individuals may need to remain vigilant for months or years afterward. Multi-channel notification approaches, like the mix of mail, email, and public posting Azle Smiles reported using, are common when a company is trying to reach as many affected individuals as possible, particularly when patient contact information on file may be outdated.
As with any publicized data breach, individuals who are notified or who become aware of this incident should be alert to potential follow-up phishing attempts. Scammers frequently use news of a real breach to send fraudulent messages impersonating the affected company, a credit monitoring service, or a law firm, hoping to trick victims into providing further personal information. Anyone contacted about the Azle Smiles breach should independently verify the legitimacy of any communication before responding or clicking any links.
Regulatory notification timelines also differ from state to state, and a company that serves patients across state lines may end up notifying residents of different jurisdictions at different times as each state’s specific legal requirements are satisfied. In Texas, companies are generally required to notify affected residents and the Attorney General within a defined window once a breach is discovered, though the precise discovery and containment dates for this particular incident were not included in the public filing reviewed for this article.
When Did This Breach Occur?
Azle Smiles’s data breach notification was published to the Texas Attorney General’s Data Security Breach Reports portal on July 28, 2026. The filing does not specify the exact date the underlying incident occurred or when it was first discovered, and Azle Smiles has not publicly disclosed this information elsewhere. Individuals who received a direct notice by mail or email may have been given more specific timing details.
What Information Was Breached?
Per Azle Smiles’s filing with the Texas Attorney General, the categories of information involved in this breach include patient names, addresses, driver’s license numbers, government-issued identification numbers, medical information, health insurance information, and dates of birth. The company reported that 9,444 Texas residents were affected. Anyone who received a direct notice from Azle Smiles should review it carefully, since it may identify exactly which categories of their personal information were involved.
What You Can Do
If you have received notice that your information was involved in the Azle Smiles data breach, or believe you may have been affected, consider taking the following steps:
- Review your dental and medical insurance statements (Explanation of Benefits) closely for services or claims you do not recognize.
- Consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion).
- Monitor your credit reports regularly for accounts or inquiries you did not authorize.
- Be cautious of unsolicited calls, emails, or texts referencing this breach, since scammers often exploit breach news to run phishing scams.
- Retain any notification letter you receive, as it may be needed to support a claim or legal action.
File a Data Breach Lawsuit Against Azle Smiles
If your personal or medical information was exposed as a result of this data breach, you may be entitled to compensation. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
