Dental insurer experiences data breach affecting nearly 9M patients

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Dental data breach overview: 

• Who: Dental insurer Managed Care of North America suffered a data breach earlier this year that exposed the personal medical data and Social Security numbers of nearly 9 million patients. 
• Why: Hacking group LockBit took responsibility for the data breach. 
• Where: The data breach affects dental patients nationwide.

Dental insurer Managed Care of North America (MCNA) in February suffered a data breach that exposed the personal medical data and Social Security numbers of nearly 9 million patients, according to recent filings with state regulators. 

MCNA, the largest dental insurer for government-funded Medicaid and children’s health insurance programs, says in a notice that a cybercriminal gained unauthorized access to its computer network between Feb. 26 and March 7. 

The bad actor stole information about dental and orthodontics treatments, such as X-ray photos, along with the Social Security numbers, driver’s license numbers, bills and insurance claims of nearly 9 million patients, parents, guardians and guarantors. 

In a letter to those affected by the data breach, MCNA says it immediately launched an investigation upon its discovery of the data breach and found certain systems within its network “may have been infected with malicious code.” 

“As soon as we discovered the incident, we promptly launched a forensic investigation, took steps to mitigate and remediate the incident and to help prevent further unauthorized activity and contacted law enforcement,” the dental insurer says in the letter.

Hacking group LockBit claims responsibility for dental insurer data breach 

Hacking Group LockBit claimed responsibility for the data breach and, in April, published what it alleged was the full set of stolen files on the dark web after its demand for ransom was not met, Law360 reports. 

LockBit has also reportedly claimed responsibility for other recent data breaches, including an alleged cyberattack last year against the Housing Authority of Los Angeles and another earlier this year against ION Markets. 

MCNA offers individuals impacted by the data breach one year of free credit monitoring services, according to its letter.

In other dental data breach news, last year Dental Care Alliance, a third-party vendor for more than 320 dental practices across 20 states, agreed to pay $3 million to resolve claims it failed to protect the private data of its clients’ patients during a 2020 data breach. 

Were you affected by the Managed Care of North America data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• SEIU data breach $550K class action settlement
• $20M Robinhood data breach settlement receives final approval
• Taro Pharmaceuticals class action alleges company responsible for data breach
• TMX Finance hit with another class action following data breach