HackingTechnologyInformationCustomer Data InvolvedFinancial accountIdentity (basic)Government IDMediumContained

PULPDENT

bd_e6e5a7f302c5438e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 13, 2026

Filed

May 8, 2026

To disclose

8 weeks

Affected

9state residents only

Linked

2 filings

Confidence

66%

Full breach record for PULPDENT →

Pulpdent Corporation notified Massachusetts residents of a cybersecurity incident detected on March 13, 2026. The breach potentially exposed names, Social Security Numbers, and Driver's License numbers of individuals on or about April 17, 2026. Pulpdent engaged third-party cybersecurity specialists, notified law enforcement, secured affected accounts, and enhanced password requirements. Affected individuals were offered 24 months of complimentary Experian IdentityWorks services.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d8 weeks discovery → filing

Incident timeline

Apr 17, 2026

Begins

May 8, 2026

Filed

vs. sector median

11 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_68b1909f827457612026-03-25 · +44dCandidate

Name: PULPDENT
norm: pulpdent
Domain: pulpdent.com

Name: PULPDENT
norm: pulpdent
Domain: pulpdent.com
Industry: Technologyllm

Discovered: Mar 13, 2026
Breach occurred: Apr 17, 2026
Materiality determined: —
Notification sent: May 8, 2026
Affected individuals: 9state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: exploit_public_facing

During the incident: Consulted with third-party cybersecurity specialists
Notified law enforcement
Secured the affected account
Changed and strengthened password requirements
Enhanced safeguards
Offered complimentary access to Experian IdentityWorks for 24 months
Changes made: Changed and strengthened password requirements
Enhanced safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: MA AG >30dLeak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-734-pulpdent-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 8, 2026
Raw hash: 626818011a7c04f0b5f12c3ecc7681e5768c67e77bf176888426a32a7a19b5ad

Linked disclosures

Ransomware claims (1)

Reporting entityPULPDENT

Victim entityPULPDENT

Incidentdiscovered Mar 13, 2026

Stated responseConsulted with third-party cybersecurity specialists

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov