How many patients were affected by the Absolute Dental data breach?

More than 1.2 million individuals were affected. Absolute Dental is a Nevada-based dental service organization operating over 50 locations.

What patient information was exposed in the breach?

Potentially compromised data includes names, contact details, and dates of birth; Social Security numbers and driver's license or passport details; health insurance data and explanation of benefits; medical histories, treatments, diagnoses, and patient IDs; and, for a small subset, financial account or payment card information.

What is Absolute Dental offering affected patients?

All potentially affected individuals are being notified and offered two years of free identity monitoring via Kroll.

What should dental practices learn from the Absolute Dental breach?

Third-party risks are your risk, impersonation attacks using Trojanized versions of trusted software are increasingly sophisticated, Zero Trust verification is essential, and proactive preparedness beats reactive recovery.

Nevada Dental Data Breach: 1.2 Million Patients Affected

Absolute Dental, a Nevada-based dental service organization operating over 50 locations, has revealed a staggering data breach affecting more than 1.2 million individuals. This incident not only exposed sensitive personal data but also highlighted the growing cyber risk landscape for dental practices. (BankInfoSecurity)

1.2M+

Individuals affected

Absolute Dental, a Nevada dental service organization with over 50 locations

01How it happened

Direct answerThe breach stemmed from the inadvertent execution of a malicious version of a legitimate software tool, triggered via an account belonging to a third-party managed services provider. Unauthorized access occurred between February 19 and March 5, 2025.

Breach timeline	Date
Unauthorized access begins	February 19, 2025
Breach discovered	February 26, 2025
Unauthorized access ends	March 5, 2025
Review of impacted data completed	July 28, 2025

Timeline of the attack: Unauthorized access occurred between February 19 and March 5, 2025, and was discovered on February 26.
Cause: The breach stemmed from the inadvertent execution of a malicious version of a legitimate software tool, triggered via an account belonging to a third-party managed services provider.

02What information was exposed?

Direct answerPotentially compromised data includes names, contact details, and dates of birth; Social Security numbers and driver's license or passport details; health insurance data; medical histories, treatments, diagnoses, and patient IDs; and, for a small subset, financial account or payment card information.

Data potentially compromised includes:

Names, contact details, dates of birth
Social Security numbers, driver's license or passport details
Health insurance data, explanation of benefits
Medical histories, treatments, diagnoses, patient IDs
For a small subset: financial account or payment card information

(Absolute Dental: Notice of a Data Incident)

03Response steps taken

Absolute Dental involved law enforcement and regulators, initiated forensic investigation, and concluded a comprehensive review of impacted data by July 28, 2025.
All potentially affected individuals are being notified and offered two years of free identity monitoring via Kroll.
Law firms have launched class-action investigations, seeking legal recourse for affected patients.

04Key takeaways for dental practices

Direct answerThird-party risks are your risk, impersonation attacks are increasingly sophisticated, Zero Trust is essential, and proactive preparedness beats reactive recovery.

This incident starkly illustrates the dangers of third-party security gaps and forged software trust:

1
Third-party risks are your riskIf external vendors lack robust security protocols, the threats to them become threats to you.
2
Impersonation attacks are increasingly sophisticatedCybercriminals are now deploying "Trojanized" apps via trusted interfaces — a chill reminder to verify every software source and update method.
3
Zero Trust isn't just buzz — it's essentialTrusting legacy network accounts or tools without strict verification leaves a wide attack surface.
4
Proactive preparedness beats reactive recoveryBreach aftermaths are costly—not just financially, but reputation-wise and operationally.

05How Darkhorse Tech helps your practice avoid becoming a headline

Protect your dental organization with these expert services:

Vulnerability and vendor security assessments

We audit third-party access, tools, and accounts to detect insecure access points.

Zero Trust architecture implementation

Enforce strict verification on all privilege levels.

Comprehensive incident response planning

Be prepared to act quickly and effectively when threats arise.

Continuous monitoring & secure patching

Regularly audit systems, verify updates, and ensure configuration integrity.

Don't wait for a headline to expose your vulnerability.

Reach out to Darkhorse Tech today and let us help you build a resilient and compliant cybersecurity foundation.

Schedule a Consultation

The bottom line

The Absolute Dental breach shines a glaring spotlight on how even trusted service relationships can become points of catastrophic failure. In healthcare, risk isn't just theoretical — it's a direct threat to patient trust, privacy, and your practice's continuity.