Amanda Whitlow filed a class action against DentaQuest Group Inc. and DentaQuest LLC, alleging a data breach exposed personally identifiable information for about 15 million patients. The complaint says stolen data included names, dates of birth, Social Security numbers, health insurance and Medicaid/Medicare numbers, plus dental and vision records such as provider names, diagnoses, treatments and billing details. Whitlow argues DentaQuest failed to meet regulatory, legal and industry cybersecurity standards - failing to train employees to spot phishing, implement biometric or multi-factor authentication, or monitor for unusual activity - and notes the hacker group ShinyHunters claimed responsibility for the incident.
The lawsuit asserts DentaQuest discovered unauthorized activity on its network on May 20 but did not notify patients until August, increasing the risk of identity theft and financial harm; Whitlow claims both present and future concrete injuries. She seeks a jury trial and requests injunctive and declaratory relief, monetary damages and other equitable relief, alleging negligence, breach of implied contract, breach of fiduciary duty, unjust enrichment and violation of the Illinois Personal Information Protection Act. The case, Whitlow v. DentaQuest Group Inc., No. 1:26-cv-13868, was filed in U.S. District Court in Massachusetts and is being handled by Block & Leviton, Zimmerman Law Offices and DannLaw; some affected individuals report receiving notification letters and limited credit-monitoring offers.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
China has implemented new travel regulations that are causing concern among technology companies and professionals. These rules are impacting the movement of talent and the operations of tech giants within the country. (dw.com)
OSCE's ODIHR organization will now consider reports of alleged election fraud in Sweden for future assessments. Several criminal investigations into suspected vote-rigging and vote-buying have been launched after the recent election, along with a surge in election result appeals. (tv4.se)
A Reddit moderator was ordered to pay Nintendo $4.5 million for operating Switch piracy shops. Nintendo accused James 'archbox' Williams of running illegal stores selling pirated Switch games. (theverge.com)
Nearly half of 4,688 small-business websites in a 2026 study did not implement any of seven key security headers. The study highlights widespread gaps in web security practices among small local businesses. (rackcrunch.com)
The Cutting Room Floor wiki was taken offline after a DDoS attack allegedly triggered by an banned AI user using Claude Code. The user reportedly evaded a ban, provoked anti-AI content, and sent abuse reports to the hosting provider. (kotaku.com)
A vulnerability in ansi2html.py allowed attackers to inject malicious scripts into build logs on builds.sr.ht, leading to account takeovers through XSS exploits. The flaw was wormable, affecting viewers of compromised logs and highlighting security risks in CI platforms. (blog.arusekk.pl)
Today's best Hacker News stories, summarized and screenshotted, one email a day.