Park Dental Confirms Patient Health Data Was Taken in Breach as 4 Class Actions Pile Up

Edited by Dentaltown staff

The intrusion Park Dental Partners found in its computer network in August turned out to be more than a scare. The company now says data was taken, and some of it was patients’ protected health information.

The Roseville, Minnesota-based dental support organization disclosed the update in a Form 8-K filed with the U.S. Securities and Exchange Commission and signed Oct. 13. Park Dental says it has identified the affected patients and is completing the notifications required under state and federal law. The filing does not say how many patients were affected.

Four proposed class-action lawsuits have already been filed. All four are in Ramsey County District Court, and the first was filed Sept. 3, according to the filing. The suits allege that Park Dental failed to protect patients’ health information or put reasonable security measures in place, raising patients’ risk of identity theft. They also allege the company was too slow to notify the people affected. The claims include negligence, invasion of privacy, breach of fiduciary duty, unjust enrichment, and breach of confidence.

On Oct. 7, the plaintiffs moved to consolidate the four cases and to appoint interim lead class counsel. Park Dental says it intends to vigorously defend itself, and it told investors it also expects responses from regulators.

The company first disclosed the breach Sept. 1, saying it had detected unauthorized access to its network Aug. 28. At that point it was still working out whether patient information was involved, according to Becker’s Dental. Park Dental Partners supports more than 220 doctors and 87 offices in three states.

This isn’t the group’s first breach. In 2024, Park Dental reported an email compromise to the U.S. Department of Health and Human Services that affected 238,667 patients. Someone had gained access to employee email accounts between Jan. 11 and Jan. 23 that year, according to the HIPAA Journal.

The company says it is not aware of any unauthorized use of the stolen health information or any resulting damages. It also says it has not identified a material financial impact from the incident. The filing does not name who was behind the attack. Park Dental says it will update its disclosure as more information becomes available.

Sources:
Park Dental Partners Inc., Form 8-K, Item 1.05 Material Cybersecurity Incidents, signed Oct. 13, 2026: investors.parkdentalpartners.com/8-K
Becker’s Dental, “Park Dental Partners hit with data breach,” Sept. 2, 2026: beckersdental.com/park-dental-partners-data-breach
HIPAA Journal, “Minnesota Dental Practices Report Email Breach Affecting 277K Patients,” 2024: hipaajournal.com/minnesota-dental-practices-email-breach