DRA DIGEST: January, 2025 edition

The High Cost of Hiding Data Breaches

The recent US$350,000 penalty imposed on an Indiana dental practice for concealing a ransomware attack serves as a crucial warning to our profession. Many dentists may be unaware that federal law requires prompt notification of data breaches affecting patient information. This isn’t optional — it’s a legal requirement that comes with a notification deadline.

Westend Dental’s attempt to hide a serious breach for two years, while mischaracterising it as a mere “formatting error,” resulted in severe consequences that could have been avoided through transparency. The message is clear: concealing a data breach isn’t just unethical — it’s illegal and expensive.

Every dental practice should establish clear protocols for breach reporting and prioritize patient trust over the temptation to hide security incidents. Remember, the cost of honesty is far less than the price of concealment, both in financial terms and professional reputation.

Until next time,

Camille Chan,

Editor, DRA Digest

NEWS

PRODUCTS