Hackers Leak DentaQuest Information Impacting 2.6 Million

ShinyHunters Publishes 234 GB of Dental Benefits Data

The prolific extortion group ShinyHunters has publicly leaked roughly 234 gigabytes of data allegedly stolen from DentaQuest, a dental benefits administration company that manages insurance programs for millions of Americans. The breach is reported to affect approximately 2.6 million individuals.

DentaQuest provides dental benefits administration services primarily for Medicaid and government health programs, making the sensitivity of the exposed data particularly significant. The leaked information is reported to include personal and potentially protected health information (PHI).

What Was Exposed

While full details of the leaked dataset are still being analyzed, breaches of this nature from dental benefits administrators typically expose records containing:

• Full names and dates of birth
• Social Security numbers
• Dental insurance and claims data
• Member ID numbers and policy information
• Contact details including addresses, phone numbers, and email addresses
• Provider and treatment information

Given DentaQuest's role administering Medicaid dental benefits across multiple US states, a significant portion of the affected individuals are likely Medicaid beneficiaries.

ShinyHunters — A Persistent Threat

ShinyHunters has been one of the most active data extortion groups operating in recent years. The group has previously claimed responsibility for high-profile breaches targeting organizations including AT&T, Ticketmaster, Santander Bank, and numerous educational institutions. Their typical pattern involves:

1. Exfiltrating data from cloud environments or exposed databases
2. Demanding a ransom to prevent public disclosure
3. Publishing stolen data on cybercrime forums when organizations refuse to pay

The DentaQuest leak follows a string of ShinyHunters attacks against the healthcare sector in 2026, continuing a trend that researchers have identified as a deliberate targeting of organizations handling sensitive health data.

Implications for Affected Individuals

If you are or were a DentaQuest member or beneficiary, you may be at risk of:

• Identity theft using Social Security numbers and personal data
• Medical or dental fraud using insurance information
• Phishing attacks tailored with personal details from the breach
• Account takeover attempts on related healthcare portals

What to Do If You May Be Affected

1. Monitor credit reports for unusual activity — consider placing a credit freeze
2. Watch for phishing emails referencing dental benefits, insurance claims, or DentaQuest
3. Contact DentaQuest directly for information on breach notification and remediation support
4. Enable two-factor authentication on any health portal accounts
5. Review your Explanation of Benefits (EOB) statements for fraudulent dental claims

Regulatory and Legal Exposure

As a healthcare-adjacent organization handling PHI for government programs, DentaQuest faces potential regulatory exposure under HIPAA and state-level health data protection laws. Breaches of this scale involving Medicaid data may trigger mandatory reporting to the Department of Health and Human Services (HHS) and state Medicaid agencies.

The incident underscores the ongoing vulnerability of healthcare and benefits administration organizations to sophisticated extortion actors.

Sources

• SecurityWeek — "Hackers Leak DentaQuest Information Impacting 2.6 Million" (June 5, 2026)