Cyber Incident Victim: Advantage Dental
Date:
Feb 2015
Location:
United States of America
Summary
A cybersecurity breach at Advantage Dental compromised personal information of approximately 151,626 patients after malware infected a computer, enabling unauthorized access to a database containing names, addresses, dates of birth, phone numbers, and Social Security numbers. The intrusion was detected and terminated following internal monitoring, with no evidence of criminal misuse identified; impacted individuals were notified and offered credit monitoring and identity theft protection services while the organization enhanced safeguards and collaborated with law enforcement to investigate the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In February 2015, an intrusion detection system at Advantage Dental identified unauthorized access to an internal database containing patient information. The breach occurred between February 23 and February 26 when malware infected a company computer, enabling an intruder to access the system. Upon discovery, Advantage Dental immediately terminated the unauthorized access. The compromised database held personal details of 151,626 patients, including names, addresses, dates of birth, phone numbers, and Social Security numbers. The Oregon-based dental provider launched an investigation to determine the full scope of the incident while coordinating with law enforcement agencies. No evidence indicated that the stolen information had been used for criminal activities or identity theft as of the notification date.
Advantage Dental publicly disclosed the breach in March 2015 through a website notification titled "PATIENTS NOTIFIED OF BREACH OF UNSECURED PERSONAL INFORMATION." All affected individuals received direct notifications and were offered complimentary credit monitoring and identity theft protection services. Concurrently, the organization initiated a review of its security safeguards, implementing improvements to prevent future unauthorized access. The response included reinforcing technical defenses and operational protocols, though specific enhancements were not detailed in public statements. The incident remained under active investigation with law enforcement to trace the intrusion's origins and methods.