HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPHIHealth (basic)MediumContained

Tieu Dental Corporation

bd_59f2002378924491 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2026

Filed

Mar 5, 2026

To disclose

8 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Tieu Dental Corporation →

Tieu Dental Corporation reported unauthorized access to its network between July 28-29, 2025. On January 11, 2026, the company determined that personal information, including full names and Social Security numbers, may have been accessed and acquired. The incident involved potential exfiltration of PHI and PII. The company contained the threat, engaged third-party cybersecurity professionals, and is offering one year of complimentary identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 167 days

discovery → filing · 8 weeks / 53 days

Jul 28, 2025

Begins

Jan 11, 2026

Discovered

Mar 5, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_62287b3e2fb7b0fe2026-03-05Verified
Massachusetts State AGbd_ef1e883718516c4e2026-03-05Verified

Name: Tieu Dental Corporation
norm: tieu dental

Name: Tieu Dental Corporation
norm: tieu dental
Industry: Healthcarellm

Discovered: Jan 11, 2026
Breach occurred: Jul 28, 2025 – Jul 29, 2025
Undetected for: 167 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Launched an investigation
Contained and secured the network
Eradicated the threat
Working very closely with third-party cybersecurity professionals experienced in handling these types of incidents
Conducted an extensive and comprehensive review of the impacted files
Offering a complimentary one-year membership of Experian IdentityWorks
Established a dedicated and confidential toll-free response line
Changes made: Reviewed and revised our information security practices
Implemented additional security measures to mitigate the chance of a similar event in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

HHS OCRMar 5 · first

Massachusetts State AGMar 5 · first

California State AGMar 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-619669
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2026
Raw hash: 76788c0d01718d00c103e11c49f68d37e90d95aa02e601c875fa58fa9f62386d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTieu Dental Corporation

Victim entityTieu Dental Corporation

Incidentdiscovered Jan 11, 2026

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov