Cybercriminals Hit Two California Dental Practices – The HIPAA Journal
Cybercriminals Hit Two California Dental Practices The HIPAA Journal
Cybercriminals Hit Two California Dental Practices
Data security incidents have recently been announced by Santa Barbara Endodontics & Hollister Family Dental & Implant Center in California, and Park Dental Partners in Minnesota.
Santa Barbara Endodontics
Santa Barbara Endodontics, an endodontics-focused dental practice in California, has notified patients that it recently fell victim to a ransomware attack in which patient records were likely stolen. According to its November 7, 2026, data breach notice, the intrusion was identified on October 8, 2026, when the practice received a ransom note. The practice confirmed that patient records had been encrypted, and an investigation into the attack is ongoing. At present, the practice has not determined the extent to which patient data was involved, nor when the ransomware group first accessed its network.
The practice has confirmed that it was able to restore the affected records from backups without paying the ransom and has warned patients that their protected health information may have been stolen. The impacted data includes names, Social Security Numbers (if provided to the practice), medical/dental histories, mental/physical condition information, endodontic treatment or diagnosis information, insurance information, and information relating to past claims for payments for its services.
The practice has engaged an external cybersecurity firm to assist with the investigation, has notified law enforcement, and is reviewing its security policies, procedures, and practices. The practice confirmed that it is aware of the threat actor’s (The Gentlemen) threats to publish the stolen data and that its cybersecurity partner is monitoring for any release of patient data. The affected individuals have been offered 12 months of complimentary credit monitoring and identity theft protection services and have been advised to monitor their accounts and explanation of benefits statements for signs of data misuse.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please enable JavaScript in your browser to complete this form.
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Hollister Family Dental & Implant Center
Hollister Family Dental & Implant Center in California has started notifying patients about a recent cybersecurity incident involving its third-party appointment management system. The practice was alerted about an issue with the platform on May 8, 2026, and immediate action was taken to secure the system. The forensic investigation confirmed that the platform was accessed by an unauthorized third party intermittently between February 12, 2026, and May 8, 2026.
During that time, patient data may have been viewed or acquired, including names, contact information, dates of birth, and information related to dental care, including appointment information, questions, providers, symptoms, and medications. No misuse of the exposed information has been identified; however, as a precaution, the affected individuals have been offered complimentary credit monitoring and identity theft protection services for 2 years. The number of affected individuals has not yet been publicly disclosed.
Park Dental Partners
Park Dental Partners, Inc., a Roseville, Minnesota-based dental resource organization that provides business support services and equipment to dental practices in Minnesota, Wisconsin, Arizona, and North Carolina, has started notifying individuals affected by an August cybersecurity incident. According to its notification letters, an unauthorized third party accessed its network between August 26, 2026, and August 27, 2026.
The review of the exposed data was completed on October 7, 2026, when it was confirmed that full names, dates of birth, diagnoses, treatment information, and health insurance policy information were potentially viewed or obtained. The number of affected individuals has yet to be publicly disclosed.
The post Cybercriminals Hit Two California Dental Practices appeared first on The HIPAA Journal.
Sutherland Healthcare Solutions; Hoag Memorial Hospital Presbyterian Announce Cyber Incidents
Data breaches have recently been confirmed by HIPAA business associate Sutherland Healthcare Solutions and the California hospital system, Hoag Memorial Hospital Presbyterian.
Sutherland Healthcare Solutions
Sutherland Healthcare Solutions, a provider of revenue cycle management, provider management and credentialing, medical coding, and digital transformation services to healthcare payers, providers, and MedTech companies, has identified a data privacy incident that occurred over a two-year period between 2024 and 2026.
According to its notification letters, unbeknownst to the company, an employee engaged another individual to conduct work duties on their behalf. At various times between July 29, 2024, and July 10, 2026, the unauthorized individual accessed information such as names, addresses, dates of birth, health plan information, Social Security numbers, health insurance claims data, and plan members’ stated gender. When the unauthorized access was identified, the employee’s access rights were swiftly terminated. The affected health plans were notified to determine the individuals and data involved, and notification letters have recently been mailed to the affected individuals.
The unauthorized access does not appear to have been malicious in nature. Sutherland Healthcare Solutions has not identified any data misuse as a result of the incident; however, as a precaution, the affected individuals have been offered complimentary identity theft protection services and additional technical and administrative measures have been implemented to reduce the risk of similar incidents in the future. The incident is not yet shown on the HHS Office for Civil Rights breach portal, and the number of affected individuals has yet to be publicly disclosed.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please enable JavaScript in your browser to complete this form.
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
Hoag Memorial Hospital Presbyterian
Hoag Memorial Hospital Presbyterian, a nonprofit hospital network serving patients in Orange County, California, has identified unauthorized access to its computer network and the potential theft of patient information. Suspicious network activity was first identified by Hoag on October 8, 2026. External cybersecurity and digital forensics experts were engaged to investigate the activity and confirmed unauthorized access.
The exposed files were reviewed, and on October 25, 2026, Hoag confirmed that personal and protected health information had been exposed. The types of information involved are not detailed in the publicly available breach notification letters; however, they are listed in the individual notification letters mailed to the affected individuals in early November. Complimentary credit monitoring and identity theft protection services have been made available, and security measures have been enhanced to prevent similar incidents in the future. The number of affected individuals has yet to be publicly disclosed.
The post Sutherland Healthcare Solutions; Hoag Memorial Hospital Presbyterian Announce Cyber Incidents appeared first on The HIPAA Journal.
11 HIPAA Compliance Software: The 2026 Buyer’s Verdict Guide – GBHackers News
11 HIPAA Compliance Software: The 2026 Buyer’s Verdict Guide GBHackers News