Incident

Aspen Dental reports data breach after ransomware attack


Learn More

Aspen Dental, operating as APEO, LLC, has reported a data breach on on February 22, 2024 following a ransomware attack that occurred in April 2023, which has significantly impacted both employees and patients. Aspen Dental, part of The Aspen Group is a dental practice chain based in Syracuse, New York,

The cyberattack, which targeted TAG, Aspen Dental's parent company, led to unauthorized access to the company’s computer network and the exfiltration of sensitive data.

Upon completing an investigation with the help of third-party data security experts, Aspen Dental confirmed that the cyberattackers were able to access and potentially leak sensitive information. This leaked data includes

For employees,

  • names
  • Social Security numbers,

For patients,

  • names,
  • Social Security numbers,
  • driver’s license/state ID information,
  • health and health insurance information,
  • dates of birth,
  • financial account information,
  • biometric data,
  • other sensitive details (undisclosed).

No details are disclosed about the number of affected individuals.

In response to this breach, Aspen Dental has started issuing data breach notification letters to all affected individuals, advising them on the potential risks and suggesting steps to protect themselves from possible fraud or identity theft.

Aspen Dental reports data breach after ransomware attack