Community Dental Care Settles Class Action Over 2024 Patient Data Breach
Minnesota nonprofit dental provider agrees to cash payments and medical identity monitoring after cyberattack exposed Social Security numbers.
Community Dental Care has agreed to settle a class action lawsuit following a December 2024 cyberattack that compromised sensitive patient information. The settlement provides financial compensation and identity protection services to individuals whose private data was accessed by an unauthorized actor.
According to court documents from the District Court for Ramsey County, Minnesota, the breach exposed a wide array of sensitive data, including patient names, dates of birth, health insurance information, medical records, and Social Security numbers. The resulting lawsuit, In re Community Dental Care (No. 62-CV-25-2490), was filed by plaintiffs—including parents acting on behalf of minor children—who alleged the provider failed to implement adequate safeguards to protect patient data.
Settlement Terms and Deadlines
Under the terms of the agreement, eligible class members can opt for one of two financial recovery paths: a flat $50 cash payment or reimbursement for documented out-of-pocket losses resulting from the breach, capped at $5,000. In addition to these payments, all eligible members will receive two years of medical and credit monitoring, which includes $1 million in medical identity theft insurance.
Individuals seeking compensation must file their claims by October 19, 2026. The court has scheduled a final approval hearing for the settlement on November 23, 2026.
The Vulnerability of Specialized Care
This incident is part of a growing trend of targeted cyberattacks against the dental industry. Specialized healthcare providers often hold a high-value combination of medical histories and financial identifiers, making them prime targets for cybercriminals.
Unlike standard data breaches that may only expose email addresses or passwords, the theft of combined medical and Social Security data allows identity thieves to commit medical fraud. This can lead to the creation of fraudulent medical records, unauthorized insurance claims, and long-term complications with a patient's actual health history.
Industry Implications
The Community Dental Care settlement underscores the increasing legal and financial risks for nonprofit and specialized health providers. By including specific medical identity theft insurance as part of the remediation, the settlement reflects a shifting legal precedent that recognizes the unique harm caused by the loss of health-related data compared to traditional financial data.
As healthcare providers continue to digitize patient records, the industry faces mounting pressure to upgrade security infrastructure. This case serves as a warning that the failure to protect patient privacy can lead to significant class action liability and the requirement for long-term monitoring services for thousands of affected individuals.
What Remains
While the settlement framework is established, the final distribution of funds depends on the court's approval during the November 2026 hearing. Affected patients are encouraged to monitor their credit reports and health insurance statements for any unauthorized activity while awaiting the claim window.