About Locations History Mission and Vision Community Need Events and News
Community Programs PICOH School-Based Sealant Program Medical-Dental Integration Student Training
Careers Benefits

Community Dental Care - Notice of Data Security Incident

March 28, 2025 – Community Dental Care, Inc. (“CDC”) recently notified potentially impacted individuals of a data security incident that may have involved their personal and/or protected health information.

What Happened? On December 20, 2024, CDC found activity in our computer system that happened without our permission. We quickly took steps to stop that activity by turning off our systems. We began investigating right away and hired a team of experts to help us.

What Information Was Involved? The investigation revealed certain personal information was accessed and acquired without authorization by an unknown actor on or about December 6, 2024. CDC undertook a comprehensive review of the impacted data to identify the individuals and information involved, which concluded on March 24, 2025. We then took steps to notify the impacted individuals as quickly as possible. Please note that CDC has no evidence of any actual or suspected misuse of information involved in this incident.

The potentially impacted information may have included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or other government issued identification numbers, passport numbers, medical information, and health insurance information. Please note that not all data elements were affected for all individuals.

What Are We Doing? As soon as CDC discovered the incident, we took steps to secure our network environment and enlisted a leading, independent cybersecurity firm to conduct a forensic investigation. CDC reported the incident to the FBI, the U.S. Health and Human Services Office for Civil Rights, and consumer reporting agencies. We also implemented several measures to reduce the risk of similar future incidents.

On March 28, 2025, CDC mailed notice of this incident to potentially impacted individuals for which CDC had identifiable address information.  The notice provided information about the incident and resources that potentially impacted individuals could utilize to protect their information. For eligible individuals, this also included the opportunity to enroll in complimentary identity protection services through IDX. 

CDC has established a toll-free call center to answer questions about the incident. The call center is available Monday through Friday from 8:00 a.m. to 8:00 p.m. Central Time (excluding major U.S. holidays) and can be reached at 1-877-417-6430.  All affected individuals may qualify for complimentary identity protection services through IDX.  Individuals who have not received a notification letter must obtain verification of eligibility though the call center to enroll in services.  The deadline to enroll in services is June 28, 2025.

CDC is providing the following information to help those wanting to know more about steps they can take to protect themselves and their information.

Review Your Account Statements and Notify Law Enforcement of Suspicious Activity: As a precautionary measure, we recommend that you remain vigilant by reviewing your account statements and monitoring free credit reports closely for errors and by taking other steps appropriate to protect accounts, including promptly changing passwords. If you detect any suspicious activity on an account, you should promptly notify the financial institution or company with which the account is maintained for remediation assistance or contact a remediation service provider. You also should promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, your state Attorney General, and/or the Federal Trade Commission (FTC). You should also contact your local law enforcement authorities and file a police report. Obtain a copy of the police report in case you are asked to provide copies to creditors to correct your records. Contact information for the FTC is as follows:

Copy of Credit Report: You may obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting http://www.annualcreditreport.com/, calling toll-free 877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You can print this form at https://www.annualcreditreport.com/cra/requestformfinal.pdf. You also can contact one of the following three national credit reporting agencies:

Fraud Alerts: There are two kinds of general fraud alerts you can place on your credit report—an initial alert and an extended alert. You may want to consider placing either or both fraud alerts on your credit report. An initial fraud alert is free and will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. You may have an extended alert placed on your credit report if you have already been a victim of identity theft and provide the appropriate documentary poof. An extended fraud alert is also free and will stay on your credit report for seven years. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at http://www.annualcreditreport.com. Military members may also place an Active Duty Military Fraud Alert on their credit reports while deployed. An Active Duty Military Fraud Alert lasts for one year and can be renewed for the length of your deployment.

Credit or Security Freezes: Under U.S. law, you have the right to put a credit freeze, also known as a security freeze, on your credit file, for up to one year at no cost. The freeze will prevent new credit from being opened in your name without the use of a PIN number that is issued to you when you initiate the freeze. A security freeze is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to obtain credit.

You must separately place a security freeze on your credit file with each credit reporting agency. There is no fee to place or lift a security freeze. For information and instructions on how to place a security freeze, contact any of the credit reporting agencies or the FTC identified above. In order to place a security freeze, you may be required to provide the consumer reporting agency with information that identifies you including your full name, Social Security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. After receiving your freeze request, each credit bureau will provide you with a unique PIN or password. Keep the PIN or password in a safe place as you will need it if you choose to lift the freeze.

A freeze remains in place until you ask the credit bureau to temporarily lift it or remove it altogether. If the request is made online or via phone, a credit bureau must lift the credit freeze within an hour. If the request is made by mail then the bureau must lift the freeze no later than three business days after receiving your request.

IRS Identity Protection PIN: You can obtain an identity protection PIN (IP PIN) from the IRS that prevents someone else from filing a tax return using your Social Security number. The IP PIN is known only to you and the IRS and helps the IRS verify your identity when you file your electronic or paper tax return. You can learn more and obtain your IP PIN here: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.

You also have certain rights under the Fair Credit Reporting Act (FCRA): These rights include the right to know what is in your file; to dispute incomplete or inaccurate information; to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, and your rights pursuant to the FCRA, please visit http://files.consumerfinance.gov/f/201504_cfpb_summary_your-rights-under-fcra.pdf.