On February 7, 2024, Dental Health Services experienced an unintended exposure of sensitive customer data. The incident involved the accidental emailing of encrypted monthly invoices to various employer group customers. Unfortunately, the encryption password was also sent in a separate email, potentially allowing unauthorized access to the information contained within the invoices.
The data exposed included personal details such as members' names, dates of birth, member identification numbers, eligibility dates, plan types, and premium amounts due. While the invoices were password-protected, the inadvertent sharing of the encryption password constituted a data breach.
Upon discovering the error, Dental Health Services took immediate action to investigate and contain the breach. They have confirmed with all recipients that the incorrect invoices have been destroyed. Furthermore, the company has implemented internal remedial measures to prevent a recurrence of such an incident.
The information involved in the breach was both personal and financial in nature, including:
As of now, there is no evidence to suggest that the exposed information has been used for identity theft or fraudulent activities.
Dental Health Services has taken several steps to address the breach and bolster their data protection strategies. These include:
If you believe you may have been affected by this breach, it is important to remain vigilant. Here are some steps you can take:
Dental Health Services is committed to the privacy and security of your personal information. Should you have any questions or require further assistance, they are available Monday through Friday, from 8:00 a.m. to 5:00 p.m. Pacific Time at 866-693-0143.
The company extends its sincerest apologies for any inconvenience or concern this incident may have caused. They assure their members that safeguarding their personal information remains a top priority.
For the full disclosure of the data breach, you can visit the California Attorney General's website at Dental Health Services Data Breach Report.