O2 Dental Group Data Breach: A Hacker Claim, No Lawsuit Yet
Reference Guide
On October 5, 2026 the ransomware group Interlock listed O2 Dental Group, a six-office North Carolina dental practice, on its leak site and claimed it took patient records. The practice has not confirmed a breach publicly. As of October 14, 2026 there is no filed O2 Dental Group data breach lawsuit, no settlement and no claim form — only an attorney investigation.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Is Being Claimed
O2 Dental Group runs family, cosmetic and implant dentistry offices in Durham, Fayetteville, Raleigh, Siler City, Southern Pines and Wilmington, North Carolina, under the website o2smiles.com.
On October 5, 2026, the dark-web tracker Ransomware.live recorded a post by the Interlock ransomware group naming the practice. According to the group's claims, it took patient health records, billing and insurance documents, and consent and authorization forms. The tracker Breachsense lists the claimed leak at 20GB.
These are the attackers' claims. Monitoring sites that reposted the listing say they cannot confirm its accuracy, and no number of affected patients has been published. Interlock is a known group: a joint FBI, CISA and HHS advisory from July 22, 2025 says it steals data first and then encrypts systems (“double extortion”).
Case details
No lawsuit has been found. As of October 14, 2026, a search of federal court records on CourtListener for “O2 Dental” returned zero results, and our own database of new federal filings shows no case against the practice. North Carolina state-court dockets were not searched. What exists is an attorney investigation: on October 6, 2026 a plaintiffs' advertising site posted that lawyers are “looking into whether a class action lawsuit can be filed” and asked patients and staff to come forward. An investigation is a request for clients, not a case. If a complaint is filed, it would name a court and a case number, and this page will list both.
Status: Unconfirmed Breach, No Case, No Settlement
We also found no breach notice on the practice website and no public report to federal or state regulators. That can change. Under HIPAA, a dental practice that confirms a breach of patient records must notify each affected patient without unreasonable delay and no later than 60 calendar days after discovering it, and must report breaches of 500 or more people to HHS at the same time. A notice letter or an HHS listing would be the first hard confirmation — and the first real count of affected patients.
Could Your Information Be Involved?
Nobody can say yet. The claims point at patient records, so current and former patients of any of the six offices are the people to watch, and the attorney investigation also mentions staff.
The practical test is your mail. If O2 Dental Group confirms a breach, affected patients receive a written notice saying what happened and which of their details were involved. Keep that letter and the envelope; in any later case it is your proof that you were affected. Until a letter arrives, there is nothing to join and nothing to file.
Is There Any Money?
For context only: when dental breaches do end in settlements, they usually combine reimbursement of documented losses with a smaller flat payment and credit monitoring. Our data breach settlement calculator shows what comparable cases have paid. For a dental case that is actually open to claims now, see the Coast Dental lawsuit.
O2 Dental Group Breach Timeline
July 22, 2025 — Federal Advisory on Interlock
The FBI, CISA, HHS and MS-ISAC publish a joint advisory on Interlock, which uses a double-extortion model: it encrypts systems after exfiltrating data.
October 5, 2026 — Interlock Lists the Practice
The ransomware group posts O2 Dental Group on its leak site and claims it took patient health records, billing and insurance documents, and consent forms.
October 6, 2026 — Trackers and Lawyers Pick It Up
Breachsense records the claim with a leak size of 20GB. A plaintiffs' advertising site announces an attorney investigation the same day.
October 14, 2026 — No Confirmation, No Case
We found no breach notice from the practice, no regulator listing and no lawsuit in federal court records.
Next — Notice Letters, If Confirmed
If the practice confirms a breach, HIPAA requires patient notices within 60 calendar days of discovery. Lawsuits in breaches like this usually follow the letters.
Three Things to Watch For
A leaked dental file holds exactly what a convincing scammer needs: your name, your dentist, your insurer and your last appointment.
Calls “from your dental office” about a balance
Billing and insurance documents are part of the claim. A caller who knows your dentist's name and your insurer can still be a thief. Hang up and call the office back on the number printed on the practice website or your last statement.
“Claim your O2 Dental settlement” messages
There is no settlement and no claims site. Any text or email asking for your Social Security number or a fee to “secure your payment” is collecting data, not filing anything.
Fake insurance and Medicaid notices
Stolen insurance details can be used to bill for care you never received. Read your dental insurer's explanation-of-benefits statements, and report treatments you did not get.
O2 Dental Group Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Was O2 Dental Group actually hacked?
It is not confirmed. As of October 14, 2026, the only source is the Interlock ransomware group's own leak-site post from October 5, 2026, repeated by monitoring sites that say they cannot verify it. We found no public statement or breach notice from the practice.
Is there an O2 Dental Group data breach lawsuit?
Not as of October 14, 2026. Federal court records show no case, and what is being advertised is an attorney investigation, which is a search for clients. If a complaint is filed, it will have a court and a case number.
What information may have been taken?
According to the hackers' claims: patient health records, billing and insurance documents, and consent and authorization forms, about 20GB in total. The practice has not said which data, if any, was involved.
How many patients are affected?
No number has been published. A HIPAA breach of 500 or more people must be reported to HHS when patients are notified, so a regulator listing would give the first official count.
Which offices are involved?
The practice has six locations: Durham, Fayetteville, Raleigh, Siler City, Southern Pines and Wilmington. The leak-site post names O2 Dental Group as a whole and does not say which offices' records were involved.
Is there a settlement or claim form?
No. There is no settlement, no fund, no administrator, no claim form and no deadline. Anyone asking you to file one is not working from a court order.
Should I sign up with the lawyers investigating?
That is your choice, but you do not need to sign anything to keep your rights. If a class action is filed and certified, you are included automatically unless you opt out. Read any retainer carefully before signing.
What should I do right now?
Freeze your credit at all three bureaus — it is free and reversible. Watch your dental and medical insurance statements for unfamiliar claims, keep any notice letter you receive, and be suspicious of calls that mention your dentist and ask for payment or personal details.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Coast Dental LawsuitA different dental case with an open claim form
- Aspen Dental LawsuitPixel tracking settlement, now closed to new claims
- Open Class Action SettlementsSettlements you can still file a claim in right now