Park Dental Data Breach Settlement: Up to $2,500 for Patients, a December 28 Claim Deadline, and Why the Case Is Still Not Over

Park Dental, a dental group with more than 50 locations in Minnesota and western Wisconsin, has agreed to settle the class action over a January 2024 breach of employee email accounts, and patients have until December 28, 2026 to claim money or credit monitoring. For any company that holds customer records, the timeline is the story: the intruder's access lasted under two weeks, and the judge will not consider final approval until February 1, 2027, more than three years later.

The deal has preliminary approval only. Judge Joseph R. Klein of Hennepin County District Court granted it on September 29, 2026, and it can still fail.

Park Dental data breach: what is confirmed

From Park Dental's patient notice:

• Park Dental learned of unauthorized activity in a limited number of employee email accounts on January 23, 2024. The access ran from January 11 to January 23.
• Information in those accounts or related file shares was potentially viewed. Park Dental says the event was limited to its Microsoft 365 cloud environment and did not reach its internal network or patient records database.
• The data varied by person: name, demographic, medical and health insurance details, and birth dates. For a limited number of people it also included Social Security numbers, driver's license numbers, financial account and payment card details, and full access credentials.
• The file review finished June 10, 2024. The settlement agreement says notices went out in August 2024, more than six months after detection.

The court-approved notice adds that for the vast majority of people, only an internal Park Dental identification number, unusable in any other context, was exposed.

What is claimed, and what is not known

Claimed: Patients sued for negligence, breach of implied contract, violations of the Minnesota Health Records Act and more. On November 13, 2025, the court dismissed the fiduciary duty, privacy and unjust enrichment claims and let the rest proceed. Park Dental denies wrongdoing and admits no liability. The court has not decided who is right.

Not known:

• How the intruder got in. Park Dental's notice lists "multifactor identification prompts" among its safeguards. HIPAA Journal reported in August 2024 that Park Dental and The Dental Specialists said such prompts were in place but "these measures were circumvented." That statement is not in the website notice we read, and neither source says how it was done.
• How many people are covered. HIPAA Journal reported 238,667 patients in an August 9, 2024 filing with federal health regulators. The settlement papers we read give no class size, and we did not confirm that figure in the federal record.
• The final cost. The notice says there is no fixed fund or overall cap, so the total depends on claims filed.

Park Dental settlement: how much can you claim?

Approved benefits will not be reduced based on the number of claims. Park Dental separately pays administration costs, any approved legal fees and costs up to $300,000, and awards of up to $2,500 per class representative.

What to do this week

If you were a Park Dental patient:

If you do nothing and the deal is approved, you receive nothing and still give up these claims.

If you run a business or its IT (our recommendations, not findings about Park Dental):

1. Set retention limits on email and shared files, so one stolen login cannot expose years of records.
2. Move staff to phishing-resistant logins. See our guides on passkey account recovery and retiring SMS codes in Entra ID.
3. Keep Microsoft 365 audit logs long enough to answer what an intruder actually opened.
4. Confirm your cyber policy covers class action defense and settlements.
5. Write down who you call and who preserves evidence when something happens.

Why a data breach lawsuit lasts for years

The recovery work ended long before the legal bill did. Budget for claim payments, an administrator, the other side's approved fees and your own defense lawyers. The agreement expects payment from Park Dental "or its insurer," and its only security term is an assurance of "reasonable steps to further secure" its systems, with no specifics.

The separate 2026 Park Dental Partners breach

Do not confuse this case with a newer one. Park Dental Partners, Inc., the public management company for affiliated practices including PDG, P.A. (the Park Dental entity sued over 2024), told the SEC in a filing signed September 1, 2026 that it found unauthorized network access on August 28, and was still investigating whether patient data was involved.

A later filing, dated October 7 and signed October 13, answers that: "data was subject to unauthorized acquisition." The company says it has identified affected patients and is completing notifications. It lists four proposed class actions in Ramsey County, Minnesota, the first filed September 3, six days after detection. It says it knows of no misuse of health information and has identified no material financial impact so far.

The settlement class is defined by the January 2024 incident. Its release wording also mentions Park Dental's "information-security policies and practices," so anyone affected by both events should read Question 13 of the notice and consider asking a lawyer before deciding. This is not legal advice.

Park Dental settlement questions people are asking

How much is the Park Dental settlement worth?

No total is set. There is no fixed fund or cap.

Who qualifies for the Park Dental settlement?

Living people in the United States whose private information was potentially compromised in the January 2024 incident. Park Dental's directors, officers and agents, government entities, the judge, the judge's immediate family and court staff are excluded.

Who can get the $60 lost time payment?

The documents differ. Paragraph 38 of the agreement says a Social Security number "or" driver's license number. Paragraph 69(b) and the notice say "and." If only one of yours was affected, ask the administrator.

When will Park Dental settlement payments arrive?

No date is set. Payments follow final approval, any appeals and the administrator's review.

Can the Park Dental settlement still be canceled?

Yes. The court can deny approval, and paragraph 121 lets Park Dental terminate if more than 20 class members opt out.

Is the Park Dental settlement real?

Yes. A Minnesota state court authorized the notice and appointed Verita Global as administrator. The notice says you will not be charged for class counsel's services.

The bigger lesson

A breach does not end when the accounts are locked. It ends when the last claim is paid, and here that is more than three years away from the first alert. The records you no longer keep are the ones that never appear in a notice.

To reduce what one stolen login can reach, see our security hardening service or request a quote.

Get security alerts by email, with the free checklist, at our security alerts page.

Sources: Settlement agreement; Court-approved notice; Preliminary approval order; Park Dental notice; SEC 8-K, September 2026; SEC 8-K, October 2026; Park Dental Partners prospectus; HIPAA Journal; ClassAction.org.