On October 8, 2026, Hood River Dental filed an official data breach notice with the Oregon Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Oregon Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Oregon AG show that Hood River Dental confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Operating in the scenic Columbia River Gorge, Hood River Dental serves as a cornerstone healthcare provider for the local Oregon community, offering comprehensive family, cosmetic, and restorative dental care. Because modern dental practices maintain intricate clinical workflows alongside administrative operations, Hood River Dental routinely collects and stores vast quantities of confidential patient records. This sensitive information is essential for scheduling appointments, filing insurance claims, tracking treatment histories, and coordinating specialized care. Consequently, the practice holds a significant digital footprint containing deep personal and medical histories for hundreds or thousands of patients who trusted the facility with their private information.
In 2026, Hood River Dental formally reported a cybersecurity incident to the Oregon Attorney General's office, alerting patients and regulatory authorities that an unauthorized party had potentially accessed their internal digital environment. While exact forensic findings vary during initial investigations, security breaches affecting dental practices and localized healthcare providers typically involve sophisticated ransomware attacks, unauthorized network intrusions, or vulnerabilities within third-party medical billing and scheduling software vendors. These incidents exploit gaps in perimeter defense, allowing threat actors to dwell undetected within administrative networks and infiltrate repositories containing sensitive patient files.
The exposure resulting from a healthcare data breach extends far beyond simple privacy violations, threatening victims with severe, long-term financial and medical harm. The compromised datasets in dental practice breaches frequently include full legal names, dates of birth, Social Security numbers, home addresses, health insurance policy details, dental treatment notes, and billing records. When cybercriminals obtain Social Security numbers alongside clinical data, victims face an elevated risk of medical identity theft—where unauthorized parties utilize stolen credentials to obtain prescription drugs, undergo medical procedures, or bill insurance providers under the victim's name. This can corrupt a patient's official medical history, leading to dangerous clinical errors, delayed treatments, and protracted financial battles with insurance companies.
Hood River Dental, like all healthcare entities handling protected health information, was bound by strict federal and state regulatory frameworks, most notably the Health Insurance Portability and Accountability Act (HIPAA) and the Oregon Consumer Identity Theft Protection Act. These laws mandate the implementation of robust administrative, physical, and technical safeguards—such as multi-factor authentication, advanced endpoint detection, regular vulnerability assessments, and robust data encryption—to prevent unauthorized access to electronic patient health information. The occurrence of a successful security breach strongly suggests potential failures in maintaining these mandatory security standards, raising serious questions about whether the practice fulfilled its legal duty of care to protect patient data.
Receiving a data breach notification letter from Hood River Dental serves as formal legal acknowledgment that your confidential information was compromised due to inadequate security infrastructure. Under established consumer protection and privacy jurisprudence, the receipt of such a notification establishes legal standing to pursue a class action lawsuit, allowing affected individuals to seek compensation for out-of-pocket losses, lost time, and the continuous threat of identity theft. Importantly, victims do not need to prove that their identity has already been stolen to participate in a legal claim. Our firm handles these complex data privacy cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 9 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Hood River Dental
You were a customer, patient, employee, or client of Hood River Dental
Your personal information was stored in Hood River Dental's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your Hood River Dental notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your Hood River Dental letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Claims windows close. Our team reviews Hood River Dental breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
2026-01-15
Someone gained unauthorized access to data held in Hood River Dental's systems.
Reported to Attorney General
October 8, 2026
Hood River Dental's disclosure was logged with the Oregon Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to Hood River Dental letter recipients — the exact mix depends on state law and the data types exposed:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Oregon's Consumer Identity Theft Protection Act requires businesses to implement reasonable safeguards. Oregon courts have recognized class action standing for data breach victims.
The companies below also filed breach notices with the Oregon Attorney General. Letter recipients for any of them can pursue a review.
PeaceHealth Sacred Heart Medical Center
Oregon · Oct 2026
AllCare Health, Inc.
Oregon · Oct 2026
iRhythm Technologies Inc.
Oregon · Oct 2026
Sheppard, Mullin, Richter & Hampton LLP
Oregon · Oct 2026
Poppins Payroll Company
Oregon · Sep 2026
Midvale Indemnity Company
Oregon · Sep 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris