North Carolina Endodontic practice hit by email compromise and phishing, exposing patient data
Learn More
Precision Endodontics of Raleigh, a dental practice in North Carolina, is reporting a cybersecurity incident involving unauthorized access to its email systems and the compromise of patient information.
The incident, discovered on June 10, 2025, resulted in the breach of patient contact lists and portal credentials. Once inside the email system, the attackers conducted reconnaissance of the practice's contact databases and initiated a phishing campaign targeting patients from the contact databases.
Exposed data include:
- Patient first and last names
- Email addresses from contact databases
- Patient portal usernames and passwords for some individuals
- Contact list information spanning prior patients and business contacts
The number of affected individuals and the nature of the initial email account compromise have not been disclosed.
The practice has designated David J. Shannon at djshannon@mdwcg.com as the primary contact for inquiries related to the data breach, indicating that external legal or consulting support is used to manage the incident response and patient communications.
