haveibeenpwned.com DentaQuest Data Breach Exposes 2.6 Million Accounts
Article Content
- •DentaQuest confirmed a data breach affecting 2.6 million accounts.
- •The breach was linked to the ShinyHunters extortion group, which leaked sensitive data.
- •Users should be vigilant against phishing attacks due to exposed personal information.
A data breach at DentaQuest, a major dental benefits administrator, has compromised the sensitive information of 2.6 million accounts. The breach was revealed by the extortion group ShinyHunters, which claimed to have stolen over 234 GB of data. DentaQuest confirmed the unauthorized access on June 2, 2026, stating that the incident caused limited disruption to customer service. The exposed data includes unique email addresses, names, addresses, phone numbers, and Medicaid IDs. Have I Been Pwned (HIBP) verified the leak, noting that 66% of the records were previously exposed in other incidents. Users are advised to be cautious of phishing attacks due to the leaked information. DentaQuest is working with external experts to investigate and mitigate the threat.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (18)
Following this threat?
Track ShinyHunters and DentaQuest in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
AI Infrastructure Under Siege: Session Hijacking and Exploits Surge Recent cybersecurity incidents have targeted AI platforms and enterprise systems, with significant exploits reported. Notable vulnerabilities include the PaperCut remote code execution flaw (CVE-2026-65105) being actively exploited. Attackers are hijacking authenticated browser sessions for AI services like Claude… 
Social Engineering Campaign Hijacks Microsoft 365 Accounts via Passkey Alerts A social engineering campaign impersonating IT support staff is actively hijacking Microsoft 365 accounts. The attackers use passkey-themed lures to trick users into providing credentials, leading to unauthorized access and data exfiltration. Microsoft Security Research has tracked these intrusions since May 2026…