Riccobene Associates Family Dentistry is facing a class action lawsuit tied to a data breach that exposed sensitive patient information, and thousands of people in North Carolina and beyond may be eligible for compensation.
This case matters right now because settlement discussions and claim filing windows are active heading into 2026. If you were a patient at any Riccobene Associates location and received a breach notification letter, your window to act may be limited.
In this guide, you’ll learn exactly what happened, who qualifies, how much money is on the table, and how to file a claim before the deadline closes.
One important number to keep in mind: healthcare data breaches cost affected individuals an average of $10,000 in downstream financial harm when identity theft occurs. That is the real-world stakes behind this case.
Riccobene Associates Family Dentistry Lawsuit: The Core Story
The Riccobene Associates Family Dentistry lawsuit centers on allegations that the dental group failed to properly protect the personal and medical data of its patients during a cybersecurity incident.
Riccobene Associates is one of the largest dental group practices operating in North Carolina, with dozens of locations across the state. Their patient database holds exactly the kind of sensitive information that cybercriminals target: names, dates of birth, Social Security numbers, insurance data, and detailed medical records.
The lawsuit was filed as a class action, meaning one group of plaintiffs represents everyone affected. The theory of liability is straightforward: the dental group had a legal duty to protect patient data and failed to meet that standard.
The breach impacted a substantial number of patients. Legal filings indicate the affected class is large enough to qualify under the Class Action Fairness Act.
Key Facts at a Glance:
| Detail | Information |
|---|---|
| Defendant | Riccobene Associates Family Dentistry |
| Lawsuit Type | Class Action |
| Primary Allegation | Failure to protect patient data |
| State of Operation | North Carolina |
| Data at Risk | PHI, SSNs, insurance records, dental records |
| Status (2026) | Active / Settlement Phase |
Riccobene Associates Class Action Lawsuit Explained
A class action lawsuit means that one lawsuit covers every person harmed by the same conduct, rather than requiring thousands of individuals to sue separately.
In the Riccobene case, the named plaintiffs are a small group of patients who experienced the breach firsthand and agreed to represent the entire affected class. Their claims stand in for your claims, even if you never took any legal action yourself.
This structure benefits patients who would never realistically hire a lawyer and sue a dental chain on their own. The class action pools everyone together and forces the defendant to answer to the full scope of harm caused.
The court must certify the class before a settlement can be finalized. Once certified, all class members receive notice, usually by mail or email.
- Class members can file a claim to receive compensation
- Class members can opt out and pursue their own lawsuit
- Class members who do nothing remain in the class but may receive reduced or no payment
Key Takeaway: Being part of a class action means you have rights without having to hire your own attorney, but you must take action to receive a payout.
What Happened in the Riccobene Associates Data Breach
The Riccobene Associates data breach involved unauthorized access to the dental group’s computer systems, allowing outside parties to view or extract private patient information.
Cybersecurity incidents at dental and healthcare practices typically follow one of two patterns: ransomware attacks (where hackers lock systems and demand payment) or unauthorized network intrusion (where data is quietly copied and exfiltrated). The Riccobene breach appears to involve unauthorized access to systems containing patient records.
Riccobene Associates discovered the breach and notified patients as required by law. Federal HIPAA regulations require healthcare providers to notify affected individuals within 60 days of discovering a breach affecting 500 or more people.
The breach notification letters went out to a significant portion of the patient population. Many recipients were confused about what it meant and what they should do next.
What the Breach Notification Letter Typically Tells You:
- The date of the incident and when it was discovered
- What categories of your information were accessed
- What steps Riccobene is taking in response
- What you can do to protect yourself
- Whether credit monitoring is being offered
What Patient Data Was Exposed in the Riccobene Breach
The Riccobene breach exposed protected health information (PHI), which is the most sensitive category of personal data under federal law.
PHI includes anything that connects your identity to your medical history. In a dental practice context, that means treatment records, X-ray data, insurance billing information, and diagnostic notes all potentially fall under the compromised category.
Beyond PHI, the breach likely exposed standard personal identifiers that make identity theft possible:
- Full legal name
- Date of birth
- Home address
- Social Security number
- Health insurance plan and member ID
- Payment and billing information
- Dental treatment history and diagnoses
The combination of medical data and financial identifiers is particularly dangerous. Someone with your SSN and insurance ID can file fraudulent medical claims, open new credit lines, and damage your financial profile for years.
Data Type Risk Assessment:
| Data Type | Exposed | Risk Level |
|---|---|---|
| Full Name and DOB | Yes | Moderate |
| Social Security Number | Likely | High |
| Health Insurance ID | Yes | High |
| Dental Treatment Records | Yes | Moderate |
| Payment Information | Possible | High |
| Email and Phone | Yes | Low to Moderate |
Riccobene Associates HIPAA Violation and Legal Implications
The lawsuit argues that Riccobene Associates violated HIPAA by failing to implement required security safeguards to protect patient health information.
HIPAA, the Health Insurance Portability and Accountability Act, mandates that healthcare providers maintain specific administrative, physical, and technical safeguards. These include things like encrypting stored data, controlling who can access patient records, and regularly auditing system security.
When a dental practice of Riccobene’s size suffers a breach, the legal question becomes whether they did enough. Plaintiffs argue the answer is no.
Individual patients cannot sue directly under HIPAA, which is a common misconception. HIPAA violations are enforced by the Department of Health and Human Services. Instead, patients sue under state privacy laws, negligence theories, and breach of contract claims.
Legal Claims Typically Filed in Cases Like This:
- Negligence (failure to exercise reasonable care)
- Negligence per se (violating HIPAA as proof of negligence)
- Breach of implied contract (you trusted them with your data)
- Unjust enrichment
- Invasion of privacy
Key Takeaway: The HIPAA angle strengthens the negligence claim but patients sue under state law, not HIPAA itself.
Who Qualifies for the Riccobene Associates Settlement
You likely qualify for the Riccobene Associates settlement if you were a patient at any Riccobene Associates Family Dentistry location and your personal information was compromised in the data breach.
The class is generally defined as all individuals whose protected health information or personally identifiable information was stored in Riccobene’s systems and was accessed or acquired during the breach incident.
Most people learn they are class members through the breach notification letter. If you received that letter, you are almost certainly included in the class.
People who may not qualify:
- Individuals who had no patient relationship with Riccobene Associates
- Residents of states outside the class definition (if geographically limited)
- Anyone who previously settled individual claims against Riccobene
Eligibility Quick Check:
| Question | Qualifying Answer |
|---|---|
| Were you a Riccobene patient? | Yes |
| Did you receive a breach notice letter? | Yes |
| Was your data stored in their system? | Yes |
| Have you previously released claims? | No |
Riccobene Associates Settlement Amount: How Much Can You Get
The settlement amount available to individual claimants depends on whether you can document actual out-of-pocket losses tied to the breach.
Settlements in dental and healthcare data breach cases typically offer multiple compensation tiers. General class members with no documented losses usually receive a smaller flat payment, often ranging from $50 to $150. Claimants with documented out-of-pocket losses (like fraud resolution costs, credit monitoring fees, or identity theft expenses) can typically claim up to $500 to $2,500 depending on what evidence they submit.
A small tier for extraordinary documented harm cases (severe identity theft, significant financial damage) sometimes offers even higher amounts, but those require substantial documentation.
Think of it like an insurance claim. The more evidence you provide, the more you can potentially recover. Someone who just submits their name and claim number gets the base amount. Someone who submits bank statements showing fraudulent charges, receipts for credit monitoring, and records of hours spent fixing the problem gets far more.
Estimated Compensation Ranges:
| Claim Tier | Eligibility | Estimated Payout |
|---|---|---|
| General Damages (no docs needed) | All class members | $50 to $150 |
| Out-of-Pocket Loss Reimbursement | With receipts and records | Up to $500 |
| Documented Extraordinary Harm | Significant identity theft proof | Up to $2,500+ |
| Credit Monitoring (if offered) | All class members | 1 to 2 years free |
Is the Riccobene Associates Settlement Legitimate
Yes, the Riccobene Associates class action settlement is a real legal proceeding overseen by a federal court, not a scam.
People often confuse legitimate class action notices with phishing attempts or junk mail. That skepticism is reasonable. But court-approved settlements are a matter of public record, and notices sent to class members are required by law.
Red flags that would indicate a scam include: being asked to pay a fee upfront, being asked for your bank account number to receive a payment, or receiving a notice that looks professionally generic without specific case details.
Legitimate settlement notices will include:
- The specific case name and case number
- The court where the case is pending
- The name and contact information of the claims administrator
- A specific website or mailing address to submit your claim
- Clear instructions on your options: file, opt out, or object
Key Takeaway: If you received a notice that includes a specific case number and a court name, it is almost certainly real. Verify by searching the case number in federal court records.
Riccobene Associates Settlement Payout Tiers Breakdown
The settlement fund in cases like this is divided into tiers based on the type of harm and the documentation claimants provide.
Tier 1 is the most accessible. Any class member can receive this amount without submitting any proof of harm. It compensates for the general risk and aggravation of having your data exposed, even if you haven’t experienced direct financial loss yet.
Tier 2 requires you to submit documentation. This means receipts, bank statements, call logs, or records showing time spent dealing with the aftermath. Common expenses that qualify include:
- Credit monitoring subscription fees paid out of pocket
- Fees paid to freeze or unfreeze credit reports
- Long distance calls or postage to resolve fraud issues
- Lost wages if you took time off work to address identity theft
- Professional identity theft repair service fees
Tier 3 is for the hardest-hit claimants. If the breach directly caused you to suffer serious, documented identity theft with financial consequences, you may submit an extended claim with supporting evidence. This tier typically requires the most paperwork but offers the largest potential recovery.
Tier Summary Table:
| Tier | Documentation Required | Typical Recovery |
|---|---|---|
| Tier 1: General Damages | None | $50 to $150 flat |
| Tier 2: Out-of-Pocket Losses | Receipts, records, statements | Up to $500 |
| Tier 3: Extraordinary Harm | Extensive proof of identity theft | $500 to $2,500+ |
Dental Practice Data Breach Lawsuits: How Riccobene Compares
Dental practices are among the most targeted healthcare organizations for cyberattacks, and several major class action settlements in this space give a useful reference point for the Riccobene case.
The Smile Brands data breach class action settled for a significant fund after a ransomware attack exposed millions of patients’ data. The Aspen Dental management data breach drew similar legal attention. In both cases, settlements took 18 to 36 months to finalize after the initial breach.
Riccobene Associates is a regional powerhouse in North Carolina. Its size makes the patient class substantial, which typically means a larger settlement fund. Larger funds, however, don’t always mean larger individual payouts if many claimants file.
Comparable Dental Data Breach Settlements:
| Case | Defendant Type | Settlement Fund | Per-Person Range |
|---|---|---|---|
| Smile Brands Breach | Dental group | Multi-million | $50 to $250 |
| Aspen Dental Breach | National dental chain | Multi-million | $75 to $350 |
| Regional Dental Group Cases | Regional practice | $1M to $5M | $50 to $500 |
| Riccobene Associates (2026) | NC dental group | TBD | Est. $50 to $2,500 |
Key Takeaway: Healthcare data breach settlements in the dental space consistently pay out within this range, and filing a claim with documentation is always worth doing.
How to File a Claim in the Riccobene Associates Lawsuit
Filing a claim in the Riccobene Associates settlement involves submitting a claim form, either online through the official settlement website or by mail, before the deadline.
Here’s the step-by-step process:
Step 1: Confirm your eligibility. Check whether you are a class member. Your breach notification letter will reference the settlement and give you a unique claimant ID.
Step 2: Gather your documentation. For Tier 1, you need nothing beyond your basic information. For Tier 2 or 3, collect receipts, bank statements, credit reports showing fraud, and records of time spent resolving issues.
Step 3: Complete the claim form. The form asks for your name, address, claimant ID (from your notice letter), and information about any losses you experienced. It is usually a one to two page form.
Step 4: Submit before the deadline. Late claims are typically rejected without exception.
Step 5: Wait for confirmation. The claims administrator will send a confirmation number. Save it.
Filing Checklist:
- Breach notification letter (to find your claimant ID)
- Government-issued ID (for identity verification)
- Receipts for out-of-pocket expenses (Tier 2 and 3)
- Bank or credit card statements showing fraud (Tier 3)
- Your current mailing address and email
Riccobene Associates Filing Deadline 2026
The filing deadline for the Riccobene Associates class action claim is one of the most critical dates you need to know, and missing it almost certainly means losing your right to compensation.
Class action deadlines are set by the court and are firm. Unlike some civil proceedings, there is very little room for extensions or late submissions. The claims administrator cannot accept a claim filed one day after the deadline, no matter the reason.
Based on the current status of the case, the filing deadline is expected to fall in 2026, with a specific date tied to the court’s preliminary approval order. Watch for that date on the official settlement notice or settlement website.
Important Dates to Track:
| Milestone | Expected Timing |
|---|---|
| Class Notice Mailed | Early to Mid 2026 |
| Claim Filing Period Opens | Within 30 days of notice |
| Claim Filing Deadline | Approximately 90 to 120 days after notice |
| Final Approval Hearing | 3 to 6 months after deadline |
| Settlement Payments Distributed | 60 to 90 days post-approval |
Set a reminder now. The deadline in these cases feels far away until suddenly it isn’t.
What to Do If You Got a Riccobene Breach Notice Letter
If you received a Riccobene Associates breach notification letter, the letter itself is confirmation that your personal data was affected.
First, don’t ignore it. Many people toss these letters thinking they’re junk mail. That is a costly mistake if a settlement is pending.
Second, read the letter carefully. Look for:
- The specific case or incident reference number
- What categories of your data were exposed
- Whether free credit monitoring is being offered
- Instructions for filing a claim or opting out
Third, take immediate protective steps regardless of the lawsuit:
- Freeze your credit with all three major bureaus (Equifax, Experian, TransUnion)
- Set up fraud alerts
- Monitor your Explanation of Benefits statements from your health insurer
- Review bank and credit card statements for unfamiliar charges
Fourth, document everything. Keep notes of every hour you spend dealing with this. Every fee you pay. Every phone call you make. Those records become your Tier 2 claim documentation.
Key Takeaway: The breach notice letter is your entry ticket to the settlement. Save it. It contains your claimant ID, which you’ll need when filing.
Riccobene Associates Lawsuit Timeline: From Breach to Settlement
Understanding the timeline of the Riccobene Associates lawsuit helps you see where the case stands right now and what to expect next.
Data breach class actions follow a predictable path. The breach happens, the company discovers it, notices go out, lawsuits get filed, the court certifies the class, both sides negotiate a settlement, the court grants preliminary approval, notices go to class members, the claim filing window opens, the court holds a final approval hearing, and then payments go out. That full cycle typically takes two to four years.
Riccobene Associates Lawsuit Timeline:
| Phase | Event | Approximate Timing |
|---|---|---|
| 1 | Cybersecurity incident occurs | 2023 to 2024 |
| 2 | Breach discovered by Riccobene | Within days to weeks |
| 3 | Patient notification letters sent | Within 60 days of discovery |
| 4 | Class action lawsuits filed | Within 60 to 90 days of notice |
| 5 | Class certification motion | 6 to 12 months after filing |
| 6 | Settlement negotiations | Ongoing |
| 7 | Preliminary court approval | Early 2026 |
| 8 | Class notice and claim filing period | Mid 2026 |
| 9 | Final approval hearing | Late 2026 |
| 10 | Settlement payments distributed | Early 2027 |
Knowing this timeline helps you understand that patience is required. Settlement payments rarely arrive quickly.
Riccobene Associates Lawsuit Updates for 2026
As of 2026, the Riccobene Associates Family Dentistry lawsuit is in the active settlement phase, with class notice distribution expected and claim filing windows opening.
The most significant development to watch for in 2026 is the court’s preliminary approval order. Once the judge signs that order, the official notice process begins and the clock starts on the filing deadline.
Legal observers watching dental data breach cases note that 2026 is shaping up to be a significant year for healthcare privacy lawsuits overall. Increased regulatory scrutiny from the Office for Civil Rights at the Department of Health and Human Services has put dental groups on notice.
For Riccobene specifically, the case outcome will likely set a precedent for how North Carolina dental practices handle cybersecurity obligations going forward. That’s meaningful beyond just the settlement dollars.
What to Watch in 2026:
- Court’s preliminary approval of the settlement agreement
- Official class notice mailing date
- Claim filing deadline announcement
- Any objections filed by class members
- Final approval hearing date and outcome
- Payment distribution schedule
Stay updated by searching the official case name in federal court’s PACER system or monitoring the settlement website once it is established.
Frequently Asked Questions about the Riccobene Associates Lawsuit
What is the Riccobene Associates Family Dentistry lawsuit about?
The Riccobene Associates Family Dentistry lawsuit is a class action case alleging that the dental group failed to protect patient data during a cybersecurity breach.
The breach exposed protected health information and personal identifiers for thousands of patients across North Carolina.
Affected patients may be entitled to monetary compensation through a class action settlement.
How much money can I get from the Riccobene Associates settlement?
Most claimants without documented losses can expect a flat payment in the range of $50 to $150.
Claimants who can document out-of-pocket expenses related to the breach may recover up to $500, and those with serious documented identity theft harm may recover more.
The exact amount depends on the total settlement fund size, how many claims are filed, and what documentation you submit.
How do I know if I qualify for the Riccobene class action?
You likely qualify if you were a patient at any Riccobene Associates Family Dentistry location and received a breach notification letter.
The class includes all individuals whose personal or protected health information was stored in Riccobene’s systems and was compromised in the breach.
If you didn’t receive a letter but believe you were a patient during the affected period, contact the claims administrator to verify your status.
What is the deadline to file a claim in the Riccobene Associates lawsuit?
The claim filing deadline is expected to fall in mid to late 2026, approximately 90 to 120 days after the official class notice is mailed.
Missing this deadline almost certainly means forfeiting your right to any settlement payment.
Set a calendar reminder now and watch for the official notice letter in the mail.
What should I do if I received a Riccobene data breach notification letter?
Save the letter because it contains your claimant ID, which is required to file your settlement claim.
Read the letter carefully to understand what data was exposed, then take immediate protective steps like freezing your credit and monitoring your financial accounts.
When the claim filing window opens, submit your claim with any documentation of out-of-pocket losses to maximize your potential payout.
The Riccobene Associates Family Dentistry lawsuit represents real money for real people who trusted a dental practice with their most sensitive personal data.
If you received a breach notice letter, your path is clear: save that letter, document any costs you’ve incurred, and file your claim before the 2026 deadline.
Don’t leave money on the table. A ten-minute claim submission could be worth hundreds of dollars, and you owe it to yourself to take that step.
