DentaQuest breach leaks 2.6M records, 234GB archive released

A major data breach at dental benefits administrator DentaQuest has exposed the sensitive personal and healthcare information of approximately 2.6 million individuals. The extortion group ShinyHunters publicly released a 234-gigabyte archive of the stolen data in early June after what the group described as failed ransom negotiations.

DentaQuest, a subsidiary of Sun Life Financial and one of the largest dental benefits administrators in the United States, confirmed the cybersecurity incident in a public notice. The company stated it is actively managing an incident involving unauthorized access to a limited portion of its network. Upon discovery, the company said it took immediate action to secure its environment, contain the attack, and mitigate the threat. DentaQuest reported that its systems remain fully operational with limited disruption to client services. The company has engaged third-party cybersecurity experts and forensic investigators and has notified law enforcement.

The data breach notification service Have I Been Pwned analyzed the leaked dataset and confirmed it contains records for 2.6 million unique accounts. The exposed information includes full names, email...