Hood River Dental Data Breach: 16,609 People, Two Attacks, No Lawsuit Yet
Reference Guide
Hood River Dental, a dental practice with two offices in Hood River, Oregon, began mailing breach letters on October 8, 2026. It says it was hit by two separate cyberattacks — around October 22, 2025 and January 15, 2026 — and that files with Social Security numbers, card details and treatment records may have been taken. It told Oregon regulators 16,609 people were affected. As of October 17, 2026, no Hood River Dental data breach lawsuit has been filed that we could find, and there is no settlement or claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Hood River Dental Says Happened
According to the practice’s own Notice of Data Security Incidents (updated October 8, 2026), a cybersecurity incident affected systems in its network on or about October 22, 2025. While it was still securing those systems, a second incident followed on or about January 15, 2026.
The investigation into both concluded on September 8, 2026. It found that files containing personal or protected health information “may have been accessed by an unauthorized party.” Letters went out about a month later — nearly a year after the first attack.
What was in the files, varying by person: name plus one or more of date of birth, financial account information, payment card information, driver’s license number, Social Security number, medical record number, medical or patient ID account number, diagnosis and treatment information, and health insurance information.
The practice says it secured its systems, alerted law enforcement and hired outside forensic experts. Separately, a public ransomware tracker shows two different criminal groups claimed an attack on the practice on leak sites — one listing seen December 16, 2025, another February 11, 2026. Those are the attackers’ claims; Hood River Dental’s notice does not mention ransomware.
Case details
No lawsuit has been filed that we could find, as of October 17, 2026. Our search of the federal court records we can check turned up no case naming Hood River Dental, and we found no news report or court filing that mentions one. A state-court suit in Oregon would not show up in federal records, so one cannot be fully ruled out.
What exists right now is a lawyer-recruitment page published October 9, 2026 saying attorneys are “investigating whether a class action lawsuit can be filed.” That is advertising for plaintiffs, not a case. Investigations like that often turn into a filed complaint within weeks of a breach notice — and often they do not.
The official count: Hood River Dental reported the breach to the Oregon Department of Justice on October 8, 2026, listing 16,609 people affected. The Oregon entry gives January 15, 2026 as the breach date, September 8, 2026 as the discovery date and October 8, 2026 as the date notices were sent.
Status: Breach Notified, No Lawsuit, No Settlement
If a class action is filed, it would start at the complaint stage — a long way from any payment. We will update this page with the court, case number and filing date if one appears.
Are You Affected?
You are likely affected if you received a letter from Hood River Dental dated on or after October 8, 2026. The practice says it is writing to everyone whose information was in the impacted files, to the extent it has a valid mailing address.
No letter? If you were a patient of either Hood River office — 1805 Belmont Dr or 1410 May St — and did not get a letter, the notice says you can call the assistance line at 1-888-940-8885, Monday through Friday, 8 am to 8 pm Eastern, to ask whether you are on the list.
Keep the letter and envelope. It says which of your data fields were involved, and if a lawsuit is filed and later settled, it is the simplest proof that you belong in the class.
Is There Money? Not Yet
For a sense of how dental-breach cases resolve when they do settle, see our report on the Community Dental Care settlement, a different case, or try the data breach settlement calculator. A small class such as this one usually means a small settlement fund, so documented out-of-pocket losses tend to matter more than any flat payment.
Hood River Dental Breach Timeline
October 22, 2025 — First Cyberattack
Per the practice’s notice, an incident affects certain systems in its network. The practice begins securing and evaluating them.
December 16, 2025 — First Leak-Site Claim
A ransomware tracker records a criminal group’s claim to have attacked the practice. This is the attackers’ claim, not a confirmed fact.
January 15, 2026 — Second Cyberattack
Per the notice, a second incident hits the practice. A second criminal group’s claim is recorded on February 11, 2026.
September 8, 2026 — Investigation Ends
The investigation concludes that files with personal and health information may have been accessed by an unauthorized party.
October 8, 2026 — Letters and Oregon Filing
The practice posts its notice, starts mailing letters and reports 16,609 affected people to the Oregon Department of Justice.
October 17, 2026 — No Lawsuit Found
Lawyers are recruiting affected patients, but no complaint is on file that we could find. No settlement and no claim form exist.
Three Things to Watch For
A small-town breach with Social Security numbers and card data invites targeted fraud:
Calls “from your dentist’s office” about the breach
Anyone holding the stolen files can name your dentist, your visit dates or your insurer. The practice’s notice gives one number, 1-888-940-8885 — if in doubt, hang up and call that number or the office directly. Do not read out your full Social Security number or card number.
“Claim your Hood River Dental settlement” pages
There is no settlement and no claim form as of October 17, 2026. A site asking for your Social Security number or bank details to “register” is collecting data, not filing a claim.
Fake bills and insurance claims
Insurance and card data can be used to bill for care you never got. The notice itself recommends reading your account statements and explanation-of-benefits forms; question any charge you do not recognize.
Hood River Dental Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Hood River Dental data breach lawsuit?
Not that we could find as of October 17, 2026. The federal court records we can check show no case naming Hood River Dental, and a state-court filing cannot be ruled out. A lawyer-recruitment page says attorneys are investigating whether to file. A filed case would have a court, a case number and a filing date; we will add them here if one appears.
How many people were affected by the Hood River Dental data breach?
Hood River Dental reported 16,609 people affected to the Oregon Department of Justice on October 8, 2026. The Oregon table does not say whether that is everyone or only Oregon residents.
What information was exposed?
Name plus one or more of: date of birth, financial account and payment card information, driver’s license number, Social Security number, medical record and patient ID numbers, diagnosis and treatment information, and health insurance information. Your letter says which applied to you.
How can I check if I have been data breached?
For this breach, look for a letter from Hood River Dental dated on or after October 8, 2026. If you were a patient and got nothing, the notice says to call 1-888-940-8885, Monday to Friday, 8 am to 8 pm Eastern. Also pull your free credit reports at annualcreditreport.com and look for accounts you did not open.
How much compensation will I get for a data breach?
For Hood River Dental, nothing today: there is no lawsuit on file that we could find, no settlement and no fund. Any figure you see now is a guess. Settled breach cases usually pay a small flat amount plus reimbursement for documented losses, which is why receipts for fraud costs and time spent matter.
Why are there two dates — October 2025 and January 2026?
The practice says it suffered two separate incidents, on or about October 22, 2025 and January 15, 2026, and investigated both together. Its Oregon filing lists only the January 15, 2026 date. Your letter may cover either incident.
Is it worth suing over a data breach?
That depends on your own losses, and only a licensed attorney can advise you on it. You do not need to sue on your own to benefit from a class action: if one is filed and certified or settled, class members are included automatically and notified by an administrator. Signing a lawyer’s retainer is a separate, binding choice.
What should I do right now?
Freeze your credit at all three bureaus — free and reversible. If you plan to sign up for any credit monitoring the letter offers, enroll first, since the notice says a freeze must be lifted to enroll. Check card and bank statements and explanation-of-benefits forms, and keep the letter.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorEstimate what a breach settlement pays per person
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- O2 Dental Group Data BreachA separate dental practice breach and lawsuit
- iDentalSoft Data Breach LawsuitDental software breach case filed in federal court