ProSmile prosmile.com ProSmile data breach: what happened and what to do
ProSmile Holdings, a dental practice support company, reported a security incident in July 2022 affecting 39,674 people. HHS says clinical, demographic and financial information was involved. It offered free credit monitoring.
View all 13,177 breaches- Breach date
- 7 Jul 2022
- Affected
- 39,674
- Data exposed
- Clinical information, Demographic information, Financial information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
ProSmile Holdings, LLC, which supports dental practices, reported a security incident to the U.S. Department of Health and Human Services. HHS lists 39,674 people as affected. ProSmile's own notice puts detection in July 2022, and it told the public in March 2023. Reports differ on the exact July date.
Sources checked: hipaajournal.com, news.bloomberglaw.com, jdsupra.com
Last verified against the official page:
What was exposed
HHS describes the information as clinical, demographic and financial. A law firm's page says it may include Social Security numbers and insurance details, but that comes from the firm, not from ProSmile, so check your own letter for the list that applies to you.
What that means for you
Clinical details tied to your name can power convincing phone and email scams that mention real treatment. Financial details call for a close look at your statements. If your letter lists a Social Security number, treat it as an identity theft risk and freeze your credit.
ProSmile's response
ProSmile notified HHS, the media and the people affected, and offered complimentary credit monitoring. It added administrative and technical safeguards. A class action over the breach in New Jersey has reportedly led to a proposed $440,000 settlement, and ProSmile denies wrongdoing. Check the settlement site named in your notice for the current status.
What to do if you were in it
- 1
Use the credit monitoring if you were offered it
The FTC recommends taking free credit monitoring after a breach. Follow the instructions and deadline in your letter.
- 2
Freeze your credit
A credit freeze is free and you place it separately at Equifax, Experian and TransUnion, as the FTC explains. It blocks most new accounts in your name. Do this first if your letter lists a Social Security number.
- 3
Read your insurance statements
Check explanation of benefits statements and question any treatment you didn't get.
- 4
Watch for dental and insurance scams
Expect calls and emails that mention a dental visit or a bill. Don't click links. Call your dentist or insurer on a number from their own site.
- 5
Report misuse
If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.
- 6
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up. It can't remove breach data, so the steps above are what protect you.
Official filings
- U.S. Department of Health and Human Services , filed 28 Mar 2023 : 39,674 people
Timeline
-
The breach happened
-
Reported to U.S. Department of Health and Human Services
Frequently asked
Was I affected by the ProSmile breach?
ProSmile sent notices to affected people. If you got a letter, your information was involved.
What was exposed in the ProSmile breach?
HHS describes clinical, demographic and financial information. Your letter lists the specific items that apply to you.
Is there a settlement?
A class action in New Jersey has reportedly led to a proposed $440,000 settlement, and ProSmile denies wrongdoing. Check the status before relying on it.
Was credit monitoring offered?
Yes, HHS says ProSmile provided complimentary credit monitoring to the people affected.
Sources
- hipaajournal.com/prosmile-holdings-data-breach/
- news.bloomberglaw.com/litigation/prosmile-to-pay-440-000-to-settle-lawsuit-over-2022-data-breach
- jdsupra.com/legalnews/prosmile-notifies-patients-of-july-2022-4558679/
- ocrportal.hhs.gov/ocr/breach/breach_report.jsf
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- consumer.ftc.gov/consumer-alerts/2022/10/have-you-been-affected-data-breach-read
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.
