This notice is from Aspen Dental about a recent security incident at our vendor. Aspen Dental utilizes a third-party company, Medusind, to provide billing support services. Medusind recently provided notice of a data security incident that took place in December 2023.

Medusind began notifying Aspen Dental patients of the incident on January 7, 2025. Aspen Dental is posting this substitute notice to provide information about the incident and provide relevant resources for patients and individuals with no known mailing address. Medusind and Aspen Dental are not aware of any misuse of patients’ personal information.

What Happened?

On December 29, 2023, Medusind was alerted to a cybersecurity incident within its IT network. Upon learning of this incident, Medusind took its systems offline and engaged a leading third-party cybersecurity forensic firm to investigate the cause and impact of the incident. Medusind also worked with third parties to bring the relevant systems and platforms back online. Additionally, Medusind implemented enhanced security measures to prevent similar incidents from occurring in the future.

Through the investigation, Medusind found evidence that a cybercriminal may have obtained a copy of certain files from their network. Their analysis suggests that personal information relating to some of their customer’s patients is contained in these files.

What Information May Have Been Involved?

Such information varies by individual but may include one or more of the following data elements:

• Health insurance and billing information (such as insurance policy numbers or claims/ benefits information);

• Payment information (such as debit/credit card numbers or bank account information);

• Health information (such as medical history, medical record number, or prescription information);

• Government identification (such as Social Security number, taxpayer ID, driver’s license, or passport number); and

• Other personal information (such as date of birth, email, address, or phone number).

What You Can Do

As a precautionary measure, Medusind encourages individuals to remain vigilant against incidents of identity theft by reviewing account statements and explanations of benefits forms for unusual activity and to detect errors. Individuals should report any suspicious activity promptly to their insurance company or health care provider.

For More Information

Should individuals have questions, please contact Medusind’s dedicated assistance line at (866) 651-9142, Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern Time, excluding major U.S. holidays.