Was It Breached Secria

Recent breaches

DentaQuest data breach: is the letter real, and what to do

DentaQuest runs dental and vision benefits for health plans. Its report to federal health regulators covers 15,000,000 people, as of 28 October 2026.1

Return to Kroll
Return address

Date

Notice of Data Breach

Dear First name Last name,

DentaQuest works with, or used to work with, your health plan to provide your dental or vision benefits. ...

... we determined that your personal information was accessed and posted on the internet.

To start your identity monitoring services, visit Enroll.krollmonitoring.com/redeem ... You have 90 days from the date this letter was mailed to start your identity monitoring services.

  1. Sent through KrollThe filed sample shows a Kroll return address. Kroll is the firm DentaQuest hired to run the 24 months of free identity monitoring.2
  2. Why DentaQuest has your dataIt works behind your health plan, so many people who get a letter have never dealt with it directly.2
  3. The enrollment siteType it in yourself, with the activation code and verification ID from your letter.2
  4. The deadlineNinety days from the mailing date on your letter. The questions line in the sample is 1-844-959-7163.2

Drawn from the adult sample letter DentaQuest filed with California's attorney general. Checked 28 October 2026 against the sources.

The facts, as filed

"The company says" marks DentaQuest's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says it discovered on 20 May 2026 that unauthorized individuals had accessed data on its network, from 17 May until 20 May 2026, and that the information was posted on the internet.2
People affected
15,000,000 in DentaQuest's report to the HHS breach portal, filed 16 July 2026, as of 28 October 2026.1 Its Texas filing, published 17 July 2026, counts 3,973,000 Texans.3
What leaked
The letter lists name and dental or vision health information, such as provider names, diagnoses, treatments and billing. Other details vary by person: the Texas filing adds addresses, Social Security numbers, health insurance information and dates of birth.2,3
Monitoring offer
24 months of Kroll identity monitoring at no cost, with 90 days from the mailing date to enroll.2
Letters
DentaQuest filed three samples in California on 16 July 2026: for adults, for minors and for people who have died.2

Four days in May, letters in July

The dates come from DentaQuest's letter and its filings.

  1. The incident begins, the company says.2

  2. DentaQuest discovers it, and the access has ended.2

  3. Reports filed with HHS and California's attorney general.1,2

  4. Texas publishes the filing: 3,973,000 Texans.3

What to do if you got a DentaQuest letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Enroll in the Kroll monitoring within 90 days.IdentityTheft.gov says to accept free credit monitoring when a company offers it.2,4
  2. Social Security number listed: freeze your credit.While a freeze is in place, nobody can open a new credit account in your name. It's free to place and to lift.4
  3. Get an IRS identity protection PIN.The six-digit IP PIN stops someone else filing a tax return with your Social Security number.5
  4. Medicaid, Medicare or insurance details listed: tell the plan.Report it and order a new card if needed. For Medicare, call 1-800-MEDICARE (1-800-633-4227).4

Questions people ask

Is the DentaQuest data breach letter real or a scam?

Compare yours with the samples DentaQuest filed with California's attorney general: the Kroll return address, the opening line about your health plan, the Kroll enrollment site and the 90-day window.2 If anything differs, contact your health plan on the number on your member card.4

Was there a data breach at DentaQuest?

Yes. DentaQuest reported it to HHS and to the California and Texas attorneys general in July 2026.1,2,3

Why did I get a DentaQuest letter for my child?

DentaQuest filed a separate sample letter for minors.2 IdentityTheft.gov says you can request a free credit freeze for a child, and ask each credit bureau whether your child has a credit report.4

Sources 5
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 28 October 2026.
  2. DentaQuest LLC: filing and sample notices (reported 16 July 2026), California Attorney General. Read 28 October 2026.
  3. Data Security Breach Reports, Office of the Texas Attorney General. DentaQuest, LLC, published 17 July 2026. Read 28 October 2026.
  4. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 28 October 2026.
  5. Get an identity protection PIN (IP PIN) (reviewed 4 August 2026), Internal Revenue Service. Read 28 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check