shinyhunters just leaked 15 million people's dental records because DentaQuest wouldn't pay

The same crew behind the Snowflake and Salesforce mega-breaches just handed the US its biggest healthcare data breach of 2026 — and the number keeps…

Aliteq
Priya Nair · Software & Systems Editor

What happened, fast

ShinyHunters accessed DentaQuest's network between May 17–20, 2026, and stole data on 15 million-plus people.

What happened, fast

Stolen data includes Social Security numbers, Medicaid/Medicare IDs, addresses, and diagnosis and treatment records.

What happened, fast

DentaQuest didn't pay the ransom; ShinyHunters leaked roughly 234GB of the stolen data on May 27.

What happened, fast

Notification letters started going out July 17 — nearly two months after discovery.

What happened, fast

A class action was filed in Massachusetts federal court on June 4, alleging inadequate security.

My take

I don't think DentaQuest gets much sympathy for not paying — a stolen database doesn't get safer because you wired money to the people who stole it, and paying just funds the next breach. But a…

Aliteq

Read the full story

shinyhunters just leaked 15 million people's dental records because DentaQuest wouldn't pay

Read the full story on Aliteq