The FBI issued a warning in May 2024 about a credible cybersecurity threat targeting dental practices, particularly oral and maxillofacial surgeons, with expectations that general dentists will also be targeted. Dental offices are attractive targets due to weaker security postures compared to larger healthcare organizations and the sensitive patient data they hold. Attack vectors include phishing via email, social media, and messaging apps, with one scenario involving malware-laden patient intake forms. Consequences include HIPAA violations, fines ranging from $100 to $50,000 per violation, reputational damage, and financial losses. Recommended defenses include security awareness training, regular data backups, incident response planning, and endpoint protection. Huntress Security Awareness Training is promoted as a solution.
