MCNA Dental

History

2023: 8.9 Million Patients Exposed

On May 26, 2023, MCNA Dental (Managed Care of North America), one of the largest providers of dental and health insurance services in the United States, reported a hack of its information infrastructure. Cybercriminals stole data on approximately 8.9 million patients.

The official notification says that suspicious activity in the MCNA Dental computer network was discovered on March 6, 2023, but cybercriminals gained access to servers about a week earlier - February 26. Thus, the hackers had enough time to download a huge array of confidential files.

Hackers made public the data of 8.9 million patients of one of the largest dentistry network in the United States, which refused to pay a ransom of $10 million

The organizers of the cyber attack had at their disposal the following information: full names of MCNA Dental customers, physical addresses, dates of birth, telephone numbers, email addresses, social security and driver's license numbers, state identification numbers, health insurance information, invoices, as well as data on received dental services (dates of visit, names of doctors, X-rays, etc.). A notice filed with the Maine Attorney General's Office said the hack affected 8,923,662 people, including patients, parents, guardians and guarantors.

The group claimed responsibility for the invasion, LockBit threatening to publish 700 GB of confidential information if it did not receive a ransom of $10 million. However, MCNA Dental management refused to fulfill the attackers' demand. As a result, on April 7, 2023, LockBit published the stolen data on its website, making it available for download to everyone. Experts believe that millions of MCNA Dental customers may become victims of phishers and financial scammers on the Internet.^[1]

Notes