iDentalSoft Data Breach Lawsuit: A Ransomware Claim, Then a Federal Case
Active Litigation
iDentalSoft makes cloud software that dental offices use to run scheduling, charts and billing — so if your dentist used it, your records may sit on its servers. On October 9, 2026 a ransomware group publicly claimed an attack on the company. Four days later, on October 13, 2026, the first lawsuit was filed in federal court in California. As of October 17, 2026, iDentalSoft has not published a breach notice we could find, the number of people affected is unknown, and there is no settlement or claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Is Known About the iDentalSoft Data Breach
iDentalSoft is a cloud-based dental practice management software provider. The company says more than 2,300 dentists use it, and its platform handles online patient forms, electronic dental records, e-prescriptions, insurance eligibility checks and payment processing — which means it can hold identity, health and payment details for patients of many unrelated practices.
On October 9, 2026, the dark web tracker Ransomware.live listed iDentalSoft as a victim of a ransomware group, with an estimated attack date the same day. That listing reflects what the attackers posted; it is a claim, not a confirmed breach. Ransomware.live says it indexes only what ransomware operators publish and does not access the stolen data.
As of October 17, 2026, no one has publicly confirmed which data was taken. Trackers list the leak size as unknown, and one lawyer-referral page lists impacted data as “TBD.” Trackers also disagree on basics: one places the company in Brazil, another in California.
Case details
The first identified lawsuit is Cronan v. iDentalSoft, Inc., No. 5:26-cv-11828, filed October 13, 2026 in the U.S. District Court for the Northern District of California (San Jose). Entry 1 on the docket is the complaint. On October 14, 2026 the court issued a summons and an initial case management scheduling order. The complaint itself is not publicly posted in the free federal archives, so we cannot yet report its specific claims, the proposed class or the assigned judge. You can follow the docket on CourtListener.
Status: Lawsuit Filed, Breach Not Yet Confirmed
We found no breach notice from iDentalSoft and no filing with the HHS Office for Civil Rights or a state attorney general, so there is no official count of affected people. If the company confirms a breach, notification letters — possibly sent under your dentist's name — and regulator filings are where the real numbers will appear. We will update this page when they do.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Could You Be Affected?
You likely never dealt with iDentalSoft directly. Its customers are dental practices; patients are affected only if their dentist, orthodontist or other oral-care provider ran on its software. Lawyers investigating the incident are also seeking current and former iDentalSoft employees.
The practical test is your mail. If the breach is confirmed, notice letters will say which of your details were involved. Keep any letter and the envelope — it is your best proof if a class is ever certified or a settlement is reached. You do not need to sign up anywhere to be part of a class action.
Is There Money? Not Yet
For context only: resolved healthcare-data breach cases have typically offered reimbursement of documented losses, a smaller flat payment and credit monitoring. Our data breach settlement calculator shows how those payouts have worked. Nothing about this case's outcome can be predicted yet.
iDentalSoft Breach Timeline
October 9, 2026 — Ransomware Group Claims an Attack
Ransomware.live lists iDentalSoft as a victim, with an estimated attack date the same day. The claim comes from the attackers and is unconfirmed.
October 9, 2026 — Lawyers Start an Investigation
A lawyer-referral site publishes an investigation page seeking patients of iDentalSoft's dental clients and current and former employees. Impacted data is listed as unknown.
October 12, 2026 — Second Tracker Lists the Breach
Breachsense logs the iDentalSoft breach with leak size unknown.
October 13, 2026 — Federal Lawsuit Filed
Cronan v. iDentalSoft, Inc., No. 5:26-cv-11828, is filed in the Northern District of California.
October 14, 2026 — Summons and Scheduling Order
The court issues a summons to iDentalSoft and an initial case management scheduling order.
As of October 17, 2026 — No Notice, No Settlement
No company breach notice or regulator filing has been found. No settlement, fund, claim form or deadline exists.
Three Things to Watch For
A fresh ransomware claim with no official notice is exactly when fake messages show up:
“Claim your iDentalSoft settlement” pages
There is no settlement and no claims portal. Any site asking for your Social Security number or bank details to “secure your payment” is collecting data, not filing a claim.
Calls or texts that name your dentist
Because the software sits behind dental offices, scammers can sound convincing just by naming a practice. Your dentist will not ask you to re-verify card numbers or insurance IDs by text link after a vendor breach — call the office at a number you already have.
Messages from people claiming to hold your data
Ransomware groups sometimes pressure victims by contacting patients directly. Do not pay, do not click links and do not reply. Report it at reportfraud.ftc.gov and to the FBI at ic3.gov.
iDentalSoft Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
What is iDentalSoft, and why would it have my information?
iDentalSoft sells cloud-based practice management software to dental offices — scheduling, patient forms, dental records, billing and insurance checks. If your dentist used it, your information was stored in its system even though you never signed up with the company.
Was iDentalSoft actually hacked?
Not confirmed. On October 9, 2026 a ransomware group claimed the attack on its leak site, as recorded by Ransomware.live. As of October 17, 2026 we found no statement or breach notice from iDentalSoft.
Is there an iDentalSoft data breach lawsuit?
Yes. Cronan v. iDentalSoft, Inc., No. 5:26-cv-11828, was filed on October 13, 2026 in the U.S. District Court for the Northern District of California. The complaint is not publicly posted, so its exact claims and proposed class are not yet known.
How many people were affected?
Unknown. No count has been reported to a regulator or published by the company as of October 17, 2026. The company says more than 2,300 dentists use its software, but that is not the same as the number of patients exposed.
What data was exposed?
Not yet known. Trackers list the leak size as unknown. The software handles patient forms, dental records, prescriptions, insurance details and payments, but which of those, if any, were taken has not been confirmed.
Is there a settlement or a claim form?
No. The lawsuit was filed on October 13, 2026 and is at its earliest stage. There is no settlement, no fund, no claim form and no deadline. If that changes, class members are notified by a court-appointed administrator.
Do I need to do anything to join the lawsuit?
No. If a class is certified or a settlement is approved, you are included automatically unless you opt out. Nobody needs your Social Security number to “register” you for a class action.
What is worth doing right now?
Freeze your credit at all three bureaus — it is free and reversible. Watch your insurer's explanation-of-benefits statements for dental or medical care you never received. Keep any notice letter you get, and check our list of open class action settlements for cases that are paying now.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines
- Data Breach Settlement CalculatorEstimate what comparable breach settlements have paid
- Settlement Payout CalculatorHow funds are split once a settlement is approved
- CareCloud Data Breach LawsuitAnother health-software vendor breach and its litigation