DentaQuest ShinyHunters data breach exposes 2.6 million accounts (2026)

On 2 June 2026, DentaQuest — one of the largest dental benefits administrators in the United States and part of Sun Life — confirmed that its networks had been breached, after the extortion group ShinyHunters added the company to its data-leak site and claimed to have stolen more than 234 GB of data. According to the threat actor, the cache covers roughly 2.6 million accounts.

What happened

ShinyHunters listed DentaQuest on its leak site and, following what it described as a failure to reach an agreement with the company, publicly released the stolen data. DentaQuest acknowledged the intrusion on its website, saying the incident caused only "limited disruption" to customer service while an investigation continued.

The exposed information reportedly included names, dates of birth, email addresses, genders, government-issued IDs, phone numbers, postal addresses, and health-insurance details — a combination well suited to identity theft and targeted fraud.

Why it matters

DentaQuest administers dental insurance plans and provider networks for Medicaid programmes, Medicare Advantage plans, employers, and individuals, and says it serves tens of millions of customers across the United States. A breach of this scale concentrates sensitive identity and health-coverage data on a population that is disproportionately reliant on public health programmes, and adds DentaQuest to the long roster of organisations extorted by ShinyHunters in 2026.