A dental practice software vendor, MMG Fusion, has been fined $10,000 by the U.S. Department of Health and Human Services' Office for Civil Rights (HHS OCR) for a 2020 data breach affecting 15 million individuals1. The breach, which was not reported by the company, has resulted in a relatively small financial penalty compared to other similar cases. The HHS OCR settlement highlights the importance of timely reporting and compliance with the Health Insurance Portability and Accountability Act (HIPAA) regulations. The incident underscores the need for companies handling sensitive healthcare information to prioritize data security and adhere to regulatory requirements. The relatively low fine may raise questions about the effectiveness of current enforcement mechanisms in deterring non-compliance. This settlement matters to practitioners as it emphasizes the significance of robust breach reporting and compliance protocols to avoid similar penalties and protect sensitive patient data.