Community Dental Care Data Breach Details
The breach, which occurred on December 6, 2024, was discovered by CDC on December 20, 2024, when suspicious activity was detected in their computer systems. Upon discovering the breach, CDC took immediate action to secure its systems and prevent further unauthorized access.
They hired a team of cybersecurity specialists to conduct a forensic investigation into the scope and nature of the incident. CDC also reported the breach to law enforcement, the FBI, and the U.S. Health and Human Services Office for Civil Rights to ensure that the proper authorities were notified. The investigation, revealed that an unauthorized actor accessed certain files containing sensitive personal and health data.
As a precaution, CDC is offering complimentary identity protection services through IDX for eligible individuals. This service includes credit monitoring, fraud assistance, and identity restoration support. The identity protection services are available at no cost to those affected, and enrollment is open until June 30, 2025.
What Information Was Exposed?
The data that was accessed may have included the following types of personal and health information for certain current and former patients and employees of CDC:
-
Names
-
Addresses
-
Dates of birth
-
Social Security numbers
-
Driver’s license numbers or other government-issued identification numbers
-
Passport numbers
-
Medical information
-
Health insurance information
However, it is important to note that not all data elements were impacted for every individual. The review process, which was completed on March 24, 2025, confirmed the exposure of this sensitive information, but there is currently no evidence of identity theft or misuse of the data at this time.
