Dental group lied through teeth about data breach, fined $350,000

In October 2020 Westend Dental LLC was attacked by the Medusa Locker ransomware group, which used double extortion tactics and resulted in a breach of protected health information; the company denied the incident, delayed breach notification for two years, failed to perform forensics or adequate security controls, and later settled HIPAA violations for $350,000 after an investigation revealed extensive compliance failures and unknown scope of affected patients (the practice served ~17,000 patients at the time).