32 Pearls Data Breach Lawsuit Investigation
Did you receive a letter from 32 Pearls about a ransomware attack? Your Social Security number and sensitive medical data may now be in criminal hands. Act quickly—read on to learn how to safeguard your identity and see if you qualify to file a data-breach claim.
What Happened at 32 Pearls?
On May 22, 2025, 32 Pearls—a dental care provider with offices in Seattle and Tacoma—confirmed that a malicious actor broke into its network, encrypted files and may have viewed or exfiltrated patient information. The intrusion lasted from May 19 to May 22 before the company’s IT team contained the threat, according to a disclosure filed with the Washington Attorney General.
Whose Information Was Exposed?
Investigators say 23,550 Washington residents could be affected. The compromised data set includes both personally identifiable information (PII) and protected health information (PHI):
- Full names & addresses
- Social Security numbers
- Dates of birth
- Driver’s license or Washington ID numbers
- Health insurance policy or ID numbers
- Dental and medical details
- Financial or billing information
32 Pearls’ Response
The company hired leading cybersecurity experts, restored systems and is now offering 12 months of complimentary IDX identity-theft protection. Impacted patients received individual enrollment codes; the sign-up deadline is October 18, 2025.
Download Official Breach Notice (PDF)Steps You Should Take Right Now
- Activate free IDX monitoring. It includes credit & dark-web scans and up to $1 million in identity-theft insurance.
- Check your credit. Request your free annual reports from Equifax, Experian and TransUnion and look for unfamiliar accounts.
- Place a fraud alert—or better, a security freeze—with each bureau to stop new credit from being opened in your name without permission.
- Stay vigilant. Monitor bank accounts, insurance statements and Explanation of Benefits forms for suspicious charges.
- Save every letter or email from 32 Pearls. You may need this documentation for legal claims.
Your Legal Options
Under state and federal law, organizations that fail to adequately protect consumer data may be liable for resulting damages. A class-action investigation is underway to determine whether 32 Pearls:
- Maintained reasonable cybersecurity safeguards;
- Provided timely and sufficient notice of the breach; and
- Complied with HIPAA and Washington’s Consumer Protection Act.
If evidence shows negligence, affected patients could seek compensation for:
- Out-of-pocket costs for credit monitoring, identity restoration and lost time;
- Unreimbursed fraudulent charges;
- Future risk of identity theft; and
- Emotional distress.
Tip: Courts often require proof of enrollment in the free identity-protection service, so sign up even if you plan to pursue legal action.
How to Join a 32 Pearls Data Breach Lawsuit
If you received a notification letter dated June 21, 2025—or believe your information was included—you may be eligible to join ongoing litigation. Class-action attorneys work on contingency, meaning you pay nothing unless money is recovered for the class.
Deadline alert: Washington’s statute of limitations for data-breach claims can be as short as three years, so do not delay.
Frequently Asked Questions
- Was my Social Security number exposed in the 32 Pearls breach?
- Yes. The Attorney General filing confirms that Social Security numbers are among the compromised data elements.
- Is 32 Pearls offering credit monitoring?
- Yes. Impacted individuals get 12 months of IDX credit and CyberScan monitoring, plus a $1 million identity-theft insurance policy at no cost.
- How do I know if I’m part of the 32 Pearls data breach class action?
- If you received a mailed notice—or discover your information in the AG PDF—you likely qualify. Consult a data-breach attorney to confirm.
- Can I sue 32 Pearls on my own?
- Individual lawsuits are possible, but most victims join a class action to share costs and increase leverage in settlement negotiations.
- What compensation could 32 Pearls breach victims receive?
- Potential reimbursement for identity-protection expenses, fraudulent charges, time spent recovering, and statutory or punitive damages.
This article is provided for informational purposes and does not constitute legal advice. Consult qualified counsel regarding your individual circumstances.
Attorney Advertising. Prior results do not guarantee a similar outcome.