Pennsylvania-based Chord Specialty Dental Partners is under fire after a September 2024 data breach compromised the personal information of over 173,000 individuals. At least seven proposed class action lawsuits have been filed in federal courts in Tennessee and Pennsylvania, alleging the company failed to secure and protect patient data properly.

The lawsuits claim Chord Dental violated its obligations under state and federal laws, including the Federal Trade Commission (FTC) Act and the Health Insurance Portability and Accountability Act (HIPAA). Plaintiffs argue that the company did not implement reasonable cybersecurity measures or provide timely and sufficient notice of the breach.

Exposed data included names, addresses, Social Security numbers, driver’s license numbers, bank and payment card information, dates of birth, and medical and insurance records.

The plaintiffs claim that they have suffered harm, including out-of-pocket costs, time spent mitigating the damage, emotional distress, and increased risk of identity theft. One plaintiff also seeks to represent a specific subclass of affected Pennsylvania residents.

The flurry of suits alludes to various legal claims, from negligence and breach of contract to unjust enrichment. Plaintiffs are seeking damages, restitution, credit monitoring, and court orders requiring stronger data protections.

As legal proceedings unfold, the case highlights ongoing concerns over cybersecurity practices in the healthcare industry—and the steep costs of failing to protect protected health information.