In a recent development that underscores the ongoing challenges of cybersecurity in the dental industry, ProSmile Holdings, LLC, a prominent New Jersey-based dental service organization, has begun the process of informing its patients about a significant data breach in its email system. This event serves as a crucial reminder for dental practices about the importance of robust cyber defenses. Here’s a breakdown of what happened and some key takeaways for dental practices:

‍

1. Discovery of Suspicious Activity

• In July 2022, ProSmile Holdings detected unusual activity within their email environment.
• This early detection is a reminder of the importance of monitoring systems regularly for any signs of breach or unauthorized access.

2. Immediate Response and Investigation

• Following the discovery, ProSmile Holdings promptly engaged a third-party cybersecurity firm to investigate the extent and nature of the unauthorized activity.
• Quick response to potential breaches can significantly limit the scope of the damage.

3. Compromise of Email Accounts

• By December 1, 2022, it was confirmed that multiple email accounts had been compromised, leading to unauthorized access.
• This highlights the vulnerability of email systems and the need for secure email practices in dental organizations.

4. Type of Information Exposed

• The breach potentially exposed sensitive information, including names, dates of birth, Social Security numbers, and various medical and financial details.
• The wide range of sensitive information involved underscores the extensive nature of data managed by dental service organizations and the critical need to protect it.

5. Time Taken for Comprehensive Review

• A vendor was engaged in January 2023 to conduct a thorough review of the affected files, which was completed in November 2023.
• The lengthy review period reflects the complexity and meticulousness required in investigating healthcare data breaches.

6. Delay in Public Disclosure and Patient Notification

• ProSmile Holdings announced the breach in March 2023 but could not initially confirm the extent or specifics of the exposed data.
• It took approximately 17 months from the initial breach detection for individual patient notifications to be issued.

7. Lessons for Dental Practices

• This incident at ProSmile Holdings serves as a stark reminder of the risks and responsibilities facing dental practices in the digital age.
• It highlights the need for ongoing vigilance, rapid incident response, thorough investigation, and clear communication with affected parties.

Conclusion: The ProSmile Holdings data breach is a cautionary tale for dental practices. It underscores the need for strong cybersecurity measures, regular monitoring of IT systems, and a well-prepared incident response plan. As dental professionals, safeguarding patient information is not just a regulatory requirement but a critical component of patient trust and professional integrity. At Darkhorse Dental IT, we are committed to helping dental practices strengthen their cybersecurity posture and navigate the complexities of data protection in today's digital world.

About the Author: Reuben Kamp, CEO and Founder of Darkhorse Dental IT, specializes in providing IT support, HIPAA compliance, and cybersecurity solutions tailored for the unique needs of the dental industry. His insights and expertise are invaluable to dental practices navigating the ever-evolving challenges of technology and data security.

‍

Related Articles:

-Nevada Dental Data Breach: 1.2 Million Patients Affected — A Cautionary Tale

-Absolute Dental Agrees to $3.3 Million Data Breach Settlement — A Dental Cybersecurity Wake-Up Call

-How Third-Party Data Breaches Are Putting Dental Practices at Risk — And What You Can Do About It

Darkhorse Tech is here for you.

Your dental technology should support your practice, not slow it down. Darkhorse Tech helps dental offices stay secure, connected, and productive with IT support built specifically for dentistry.

Schedule a Consultation Today