HHS OCR Settles with Dental Software Company MMG Fusion — 15M PHI Records Exposed; FQHCs Using This Software Must Verify BAAs
HHS OCR settled with MMG Fusion LLC (dental practice management software) for an impermissible disclosure of PHI affecting approximately 15 million individuals — OCR's 11th enforcement action under its Security Risk Analysis Initiative. Penalty: $10,000 + 3-year corrective action plan.
Any FQHC using MMG Fusion must verify its BAA and reassess vendor risk. OCR's SRA Initiative is now 12+ enforcement actions in: organizations without documented annual security risk analyses face real enforcement risk.
Key takeaways
- FQHCs using MMG Fusion dental software: verify your Business Associate Agreement immediately and conduct a vendor risk assessment
- OCR's Security Risk Analysis Initiative is accelerating — organizations without an annual documented SRA face increasing enforcement exposure
Primary source
HHS OCRSource packet
This story's primary source + 4 related tracked stories with theirs — one print-ready digest for your team or board packet.
Free — subscribes you to the weekly Intel Brief. Individual sources are always clickable above, no email needed.
FQHC Talent. (2026, March 5). HHS OCR Settles with Dental Software Company MMG Fusion — 15M PHI Records Exposed; FQHCs Using This Software Must Verify BAAs. Primary source: HHS OCR. Retrieved July 28, 2026, from https://www.fqhctalent.com/intel/ocr-hipaa-mmg-fusion-dental-software-2026
More in Risk & Compliance
Jul 16
CMS and CDC reopen the CLIA regulations with a request for information — comments close September 14
Jul 10
Eli Lilly's 340B Termination Turns Into Litigation and Congressional Pushback — Tampa General Sues in Federal Court, 72 House Members Demand HHS Act
Jul 9
OIG declines to sanction an FQHC's produce-box and voucher program — a favorable outcome, but one that legally protects only the health center that asked
Jul 8
$3.3M California Billing-Fraud Settlement Turns on Rendering-Provider NPIs and Uncredentialed NPs/PAs — an Adjacent-Sector Warning FQHCs Should Read Closely