Kansas City Life Insurance Company has notified customers that a data security incident affecting DentaQuest, a third-party dental benefits administrator, may have exposed some of their personal information. Insurance companies routinely rely on outside vendors to administer benefits, but when a vendor’s systems are compromised, the customers whose data those vendors hold can still face real consequences from the exposure.
Kansas City Life Insurance Company’s Data Breach Investigation
According to a notification letter filed with the Massachusetts Attorney General’s Office, Kansas City Life Insurance Company was informed by DentaQuest, its third-party dental benefits administrator, that DentaQuest experienced a data security incident impacting certain internal DentaQuest systems. On July 29, 2026, DentaQuest notified Kansas City Life that personal information belonging to some of its customers was likely affected. Beginning August 3, 2026, DentaQuest began providing Kansas City Life with more detailed information about the identities of the affected customers and the specific personal information exposed.
Kansas City Life’s letter states that its own internal information systems were not affected by the DentaQuest incident and remain secure, and that upon learning of the incident, the company moved quickly to investigate and gather complete information from DentaQuest about which customers were affected. As of the date of the notification letter, Kansas City Life states it has no indication that any customer’s information has been subject to actual or attempted misuse as a result of this incident.
Incidents like this one illustrate a broader risk in the insurance industry: even when a company’s own systems are never compromised, the third-party vendors it relies on to administer benefits, process claims, or manage member data can become the point of failure. Dental and health benefits administrators in particular maintain large volumes of protected health information, making them attractive targets for cybercriminals and a significant point of exposure for the insurers, employers, and individuals whose data they hold.
When Did This Breach Occur?
DentaQuest notified Kansas City Life Insurance Company of the incident on July 29, 2026, and began providing more detailed information about affected customers and their exposed data on August 3, 2026. The notification letter does not specify the exact date on which the underlying incident at DentaQuest occurred.
What Information Was Breached?
According to the notification letter, the personal information involved may have included each affected customer’s full name, address, date of birth, Social Security number, Medicare or Medicaid number, member identification number, and protected dental health information such as provider names, diagnoses, treatments, and billing information. Kansas City Life’s letter states that no financial information was involved, and that the incident does not affect the processing of any dental claim.
What You Can Do
DentaQuest is providing 24 months of complimentary credit monitoring services through Kroll to affected customers, delivered via a separate letter directly from DentaQuest. If you received a letter from Kansas City Life Insurance Company about this incident, consider taking the following steps:
- Watch for and enroll in the separate Kroll credit monitoring offer being sent directly by DentaQuest.
- Regularly review your account statements and credit reports for unauthorized activity.
- Consider placing a fraud alert or security freeze with the three major credit bureaus.
- Report any suspected identity theft to your local law enforcement, your state attorney general, or the Federal Trade Commission.
File a Data Breach Lawsuit Against Kansas City Life Insurance Company
If you received a notification letter from Kansas City Life Insurance Company about this data breach, or if you believe your personal or health information may have been compromised as a result of this incident, you may have legal options available to you. Companies that entrust sensitive customer data to third-party vendors are still expected to ensure that data is reasonably protected, and individuals affected by a failure to do so may be entitled to pursue compensation.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
