First Choice Dental Cyber Security Update

Madison, Wisconsin – July 12, 2024 First Choice Dental (“FCD”) is providing notice of a recent data security event that may have resulted in unauthorized access to personal information. This letter provides information about the event and the steps we are taking in response.

We have not found any evidence that any information has been used to commit identity theft or fraud as a result of this event.  However, out of an abundance of caution, and in accordance with applicable law, we are offering free credit monitoring and identity theft protection services to any potentially affected individuals.

What Happened

On October 22, 2023, FCD detected a ransomware event on its network, whereby an unauthorized actor gained access to FCD’s network, encrypted some of FCD’s data, and attempted to extort a ransom payment. Upon discovery of this event, FCD immediately disconnected access to its network and engaged cybersecurity professionals to help secure FCD’s network and conduct a forensic investigation. 

FCD’s forensic investigation found evidence that the unauthorized actor had access to certain FCD files. Upon learning of this, FCD began an extensive and comprehensive review of the files to identify and notify any individuals whose personal information may have been included in those files.

On December 21, 2023, while FCD’s review was ongoing, FCD posted a notice of the event on its website and issued a media notice with the Wisconsin State Journal. 

In May 2024, FCD completed its comprehensive review of the data and began preparations to mail personalized notice letters to the individuals whose personal information may have been accessed.

What Information Was Involved

While the information involved varies for each individual, FCD’s investigation determined that the unauthorized actor may have had access to files containing the following categories of information: name, date of birth, Social Security number, passport number, driver’s license number, government identification number, credit/debit card number, financial account number, and health information.

Again, the information involved varies for each individual, and not every category applies in each individual case. On July 12, 2024, FCD mailed personalized notification letters to the affected individuals that detail the specific categories of information that apply in each individual’s case.

We have not found any evidence that this information has been used to commit fraud or identity theft as a result of this event.

What We Are Doing

 Data privacy and security is among FCD’s highest priorities. Once it discovered the event, FCD moved quickly to secure our systems. Specifically, FCD added new intrusion detection and response tools; enhanced our data backup systems; upgraded our firewall; implemented additional multi-factor authentication requirements for network access; reset passwords and enhanced our password policy; and made additional changes to our network access policies. FCD also engaged specialized cybersecurity professionals to conduct a forensic investigation to determine the nature and scope of the event. FCD will continue to take steps to mitigate the risk of future harm. 

 In light of the event, and in accordance with applicable law, we are offering free credit monitoring and identity theft protection services to all potentially-affected individuals.  On July 12, 2024, FCD mailed personalized notification letters to the affected individuals that provide instructions on how to enroll in those services.

What You Can Do

We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your account statements and monitoring your credit report for suspicious activity. Federal law provides you the right to review a free copy of your credit report annually, which is available at www.annualcreditreport.com. You may also contact the nationwide credit-reporting agencies to add a fraud alert to your credit file or place a security freeze on your credit accounts. Please review the enclosed Steps You Can Take to Help Protect Your Information to learn more.

We also encourage any affected individuals to enroll in the free credit monitoring and identity theft protection services we are offering at no cost. On July 12, 2024, FCD mailed personalized notification letters to the affected individuals that provide instructions on how to enroll in those services.

For More Information

If you have any questions, including whether your personal information was affected and whether you are eligible for free credit monitoring, please call 1-833-531-3380 (toll free) Monday through Friday, during the hours of 8:00 a.m. and 8:00 p.m. Eastern Time (excluding U.S. national holidays).