I got a fraudulent email (phishing) supposedly from my old dentist but I could see it was fake. Are they supposed to tell their “customers” if this happens? They must have been hacked. I forwarded it to them and asked if it was genuine, they haven’t replied (5 days later) which is typical of their practise (terrible at answering phone or replying to emails).
As I don’t use them anymore I’ll ask them to remove me from their list (if they pay any attention to my request), but it wasn’t a bad attempt at phishing and other patients could fall for it, are they obliged to contact everyone and warn them and apologise?