Arkansas Oral & Maxillofacial Surgeons Data Breach Lawsuit Investigation
Received an August 2026 breach notice from Arkansas Oral & Maxillofacial Surgeons?
Dapeer Law, P.A. is investigating a potential class action against Arkansas Oral & Maxillofacial Surgeons (AOMS), an Arkansas oral and maxillofacial surgery practice based in Hot Springs, on behalf of patients whose personal and protected health information may have been exposed in a network intrusion detected in April 2026.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Arkansas Oral & Maxillofacial Surgeons dated August 2026.
- You were treated by, referred to, or billed by Arkansas Oral & Maxillofacial Surgeons, or otherwise provided personal, medical, insurance, or payment information to the practice.
- You had personal, health, or financial information held by Arkansas Oral & Maxillofacial Surgeons in its capacity as your oral and maxillofacial surgical care provider.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
Arkansas Oral & Maxillofacial Surgeons (AOMS), a surgical practice headquartered in Hot Springs, Arkansas, has reported a data security incident involving its computer network. According to the practice, it detected potential unauthorized access to the network on April 7, 2026. AOMS states that it secured its environment, terminated the unauthorized access, and began an internal investigation with the assistance of security personnel. The incident was reported to the Massachusetts Attorney General, and the practice indicates it continues to enhance its security controls.
On June 2, 2026, the investigation confirmed that a third party had obtained certain files from the AOMS environment. The practice then worked to identify the individuals and information involved and began mailing notification letters on August 4, 2026, roughly four months after the activity was first detected. AOMS reported 4 affected Massachusetts residents in its filing with the Massachusetts Attorney General. No total figure or additional state filing has been made public as of August 7, 2026. The notice recommends protective steps such as monitoring account statements and placing a fraud alert or security freeze, but it does not indicate that complimentary credit monitoring was offered.
AOMS reports that the files involved may have included patient names and contact information, dates of birth, treatment records and prescription history, diagnosis information and medical record numbers, health insurance details, payment information, and government identification numbers such as Social Security numbers. That combination of protected health information and Social Security numbers carries a heightened and long-lasting risk of medical identity theft, insurance fraud, and financial fraud, because a Social Security number and a medical history cannot be reissued the way a payment card can. Dapeer Law is evaluating whether affected individuals may have claims arising from how this information was stored and secured, and from the length of time between detection and notification.
What to do if you received a letter
Keep your notice letter
Do not discard it. Your notice, dated August 4, 2026, describes the categories of information involved in your individual case and is important evidence if you decide to participate in a lawsuit. Keep the letter and the envelope together in a safe place.
Place a fraud alert or security freeze
Arkansas Oral & Maxillofacial Surgeons did not offer complimentary credit monitoring in its notice. Because Social Security numbers may have been involved, consider placing a free fraud alert or security freeze with the three major credit bureaus (Equifax, Experian, and TransUnion). Taking these protective steps does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because treatment records, diagnosis information, medical record numbers, health insurance details, and payment information may have been involved, also review your Explanation of Benefits statements for care you did not receive, watch for unfamiliar provider bills or collection notices, and check your card and bank statements for charges you do not recognize.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We will review your notice, explain your options under HIPAA-related standards of care and applicable state data breach laws, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, medical-claim and health-insurance fraud, fraudulent card charges, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Arkansas Oral & Maxillofacial Surgeons to implement stronger data security practices going forward, including better protection of protected health information and Social Security numbers stored on its network.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Arkansas Oral & Maxillofacial Surgeons. What should I do? +
Keep your August 4, 2026 notice letter, since it lists the categories of information involved in your individual case. Because Social Security numbers and health information may have been involved, place a free fraud alert or security freeze with Equifax, Experian, and TransUnion, review your bank, credit card, and health insurance statements for unfamiliar activity, and watch for Explanation of Benefits statements covering care you did not receive. Report suspected identity theft at IdentityTheft.gov or to local law enforcement, and be cautious of unsolicited calls or emails asking you to confirm personal information. You may also request a free consultation with a data breach attorney to explore your options.
Am I eligible to join a class action against Arkansas Oral & Maxillofacial Surgeons? +
If you received the August 4, 2026 notice from Arkansas Oral & Maxillofacial Surgeons confirming your information may have been involved, you may be eligible. Eligibility depends on factors such as your state of residence, the categories of data involved in your individual notice, and any losses or fraud you experienced. A free case review can clarify your rights.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
AOMS reports that the files obtained may have included patient names and contact information, dates of birth, treatment records and prescription history, diagnosis information and medical record numbers, health insurance details, payment information, and government identification numbers such as Social Security numbers. The exact data elements vary by individual, so check your own notice letter carefully for what applied to you.
Did Arkansas Oral & Maxillofacial Surgeons offer free credit monitoring? +
The notice recommends protective steps such as monitoring statements and placing a fraud alert or security freeze, but it does not indicate that complimentary credit monitoring was offered. You can still place a free fraud alert or security freeze with the three major credit bureaus at no cost, and you can request one free credit report per bureau each year at AnnualCreditReport.com.
How many people were affected by the Arkansas Oral & Maxillofacial Surgeons breach? +
Arkansas Oral & Maxillofacial Surgeons reported 4 affected Massachusetts residents to the Massachusetts Attorney General. No additional states or overall total have been reported as of August 7, 2026. This page will be updated as more becomes known.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The breach was reported to the Massachusetts Attorney General, and a copy of the notice is available through the Massachusetts Attorney General's data breach filings, linked in the Sources and References section of this page. Dapeer Law can also help you obtain a copy during a free consultation.
Sources & references
- Official breach notice filing · Massachusetts Attorney General, Data Breach Notification Filing
- Company · Arkansas Oral & Maxillofacial Surgeons (AOMS) (arsurgeons.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
