Dental Service Organization (DSO) publicly traded company Park Dental Partners, Inc. Data Breach triggers 4 class action lawsuits

Source: Park Dental Partners 8-K filing

DentalGoodNews｜On October 13, 2026, Park Dental Partners, Inc. (hereinafter "Park Dental"), a publicly listed Dental Service Organization (DSO), filed a Form 8-K with the Securities and Exchange Commission (SEC) (report date October 7), disclosing the latest developments regarding its August cybersecurity incident, including a motion filed by plaintiffs on October 7 to consolidate the lawsuits. The filing shows that on August 28, 2026, the company discovered unauthorized access to its computer network, and a subsequent investigation confirmed that relevant data had been accessed without authorization. The company has identified affected patients and the circumstances involving Protected Health Information (PHI), and is currently completing related notifications in accordance with state and federal laws, and has notified law enforcement authorities.

The incident has triggered four state court lawsuits. The plaintiffs allege that Park Dental failed to properly protect patient PHI, failed to implement reasonable security measures, resulting in the August Data Breach and increased risk of identity theft, and further allege that the company failed to timely notify affected individuals. The related causes of action include negligence, negligence per se, invasion of privacy, breach of fiduciary duty, unjust enrichment, breach of implied contract, and breach of confidentiality obligations.

Park Dental disclosed that the first lawsuit was filed on September 3, 2026. All four lawsuits are proposed class actions filed in the Second Judicial District Court of Ramsey County, Minnesota, with case numbers 62-CV-26-6341, 62-CV-26-6381, 62-CV-26-6384, and 62-CV-26-7111, respectively. Park Dental stated that it will vigorously defend against the claims.

In addition, plaintiffs filed a motion on October 7 to consolidate the four lawsuits and appoint interim lead class counsel. Park Dental anticipates that the incident may also prompt subsequent regulatory responses. However, as of now, Park Dental has not identified any unauthorized use of PHI or damages caused by the incident, nor has it identified any material impact of the incident on the company's financial condition or operating results.

Regarding cybersecurity protection, Park Dental stated that the company has established a cybersecurity risk management program to assess, identify, and manage material risks posed by cybersecurity threats, and continuously maintains and strengthens data protection measures, while providing ongoing cybersecurity awareness training and testing for all employees.

According to previous reports by DGN, Park Dental has reached a definitive agreement with Village Family Dental DSO in North Carolina to acquire the DSO and enter the North Carolina market. The total consideration for the transaction is estimated at $39.1 million to $46 million; the company stated that upon completion of the transaction, its operations will expand to its fourth U.S. state.