Almost half of all cyberattacks in 2023 specifically targeted small businesses. Cybercriminals recognize that smaller healthcare practices often have fewer resources for robust cybersecurity defenses, making them easier targets despite the sensitive data they hold.

May 6, 2024, the FBI informed the ADA and the American Association of Oral and Maxillofacial Surgeons (AAOMS) of a credible cybersecurity threat to the practices of oral and maxillofacial surgeons. The FBI said that as of that date there were no known cyberattack victims, but the agency is working proactively to raise awareness to help prevent victimization. The FBI suspects the group behind the cyberattacks may be shifting tactics to oral and maxillofacial surgery practices after targeting plastic surgeons last year.

Ransomware attacks continue to be a significant threat, with an increasing trend of "double extortion" where attackers not only encrypt data but also steal and threaten to publish sensitive patient information if a ransom isn't paid. Data breaches, often a result of hacking or misconfigured systems, are also on the rise in the dental industry.

Phishing remains the number one way cybercriminals breach dental office data. With the advent of AI, these attacks are becoming increasingly sophisticated, making it harder for staff to detect fraudulent emails and links.