Social EngineeringHealthcareFinancial ServicesHealthcarePhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIMediumActive

Arizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona

bd_31c84e2dd8ad233c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 8, 2019

Filed

Nov 15, 2019

To disclose

19 weeks

Affected

10state residents only

Linked

4 filings

Confidence

66%

Arizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona notified the New Hampshire Attorney General of a data breach affecting 10 New Hampshire residents. On July 8, 2019, an employee fell victim to an email phishing scheme, allowing an unauthorized individual to access the employee's email account. The account contained names and Social Security numbers. The company engaged forensic investigators, reset passwords, enabled MFA, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 130 days

Jul 8, 2019

Begins

Jul 8, 2019

Discovered

Nov 15, 2019

Filed

vs. sector median

+7 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_6dfbe2f79b0e35942019-11-08 · +7dVerified
Massachusetts State AGbd_c719ab03d17075ff2019-11-08 · +7dVerified
Oregon State AGbd_c867f50d80f535052019-11-08 · +7dVerified

Name: Arizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona
norm: arizona dental insurance service
Domain: deltadentalaz.com

Name: Arizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona
norm: arizona dental insurance service
Domain: deltadentalaz.com
Also named: Arizona Dental Insurance Service, Inc.dba oflegal entity
Delta Dental of Arizonadba oftrade name
Industry: HealthcarellmFinancial Servicesllm

Discovered: Jul 8, 2019
Breach occurred: Jul 8, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 8, 2019
Affected individuals: 10state-resident count only
Data types: Identity (basic)Government IDPHI
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notifying the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Initial access: phishing_link

During the incident: Commenced an investigation, working with third party forensic investigators
Reset the affected email account password
Providing affected individuals access to twelve (12) months of credit monitoring and identity restoration services, through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Notifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Changes made: Reviewing its existing policies and procedures
Implemented additional safeguards
Enabled multi-factor authentication for employee email
Implemented additional security measures to increase the security of our email environment
Continue to assess our email environment to identify further security enhancements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

HHS OCRNov 8 · first

Massachusetts State AGNov 8 · first

Oregon State AGNov 8 · first

New Hampshire State AG+7d · this page

Pattern: first filing Nov 8 (AZ), last Nov 15 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/arizona-dental-insurance-20191115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 15, 2019
Raw hash: fb93a9f87c9593a45d2cc7ad592819adb4db5e1275f9017b2a319b77905a2a20

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityArizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona

Victim entityArizona Dental Insurance Service, Inc. d.b.a. Delta Dental of Arizona

Incidentdiscovered Jul 8, 2019

Stated responseCommenced an investigation, working with third party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov