The DentaQuest breach involved unauthorized network access by the ShinyHunters extortion group, which led to the theft and subsequent public leak of 234 GB of sensitive data after failed ransom negotiations. The compromised data includes email addresses, full names, phone numbers, government IDs, health insurance information, genders, and dates of birth for 2.6 million accounts. This exposure significantly elevates the risk of targeted social engineering and phishing attacks against the affected individuals.
Breach DentaQuest data breach exposes sensitive information of 2.6 million accounts June 4, 2026 Share By SC Staff (Adobe Stock) As reported by Bleeping Computer, the dental benefits administrator DentaQuest has reportedly suffered a data breach that exposed the sensitive data of 2.6 million accounts. The incident came to light last month when the extortion group ShinyHunters claimed to have stolen over 234 GB of data from the company. Following a failure to reach an agreement with DentaQuest, ShinyHunters publicly leaked the data. DentaQuest, a subsidiary of Sun Life and a major dental benefits administrator in the United States, manages plans for Medicaid, Medicare Advantage, employers, and individuals, serving an estimated 35 million customers across all 50 states. On June 2, DentaQuest confirmed the breach, stating it involved unauthorized access to a limited portion of their network, causing minimal disruption to customer service. The company engaged external experts to investigate the compromised data, which, according to data breach alerting service Have I Been Pwned, includes email addresses, full names, phone numbers, government-issued IDs, health insurance information, genders, and dates of birth for 2.6 million accounts. This leak increases the risk of social engineering and phishing attacks for affected individuals. Source: Bleeping Computer SC Staff Related Breach World Food Programme reports data breach affecting Palestinian beneficiaries SC Staff June 4, 2026 The World Food Programme confirmed a breach of its self-registration application (SRA) for Palestine, which occurred on May 14. Breach Ultrahuman reports customer wellness data accessed in breach SC Staff June 4, 2026 Ultrahuman confirmed that attackers accessed customer data using credentials stolen from an employee's malware-infected laptop. Breach California sues 23andMe over 2023 data breach SC Staff June 1, 2026 The lawsuit stems from a credential-stuffing attack in October 2023, where threat actors exploited weak user credentials to access accounts. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds