HackingVulnerability ExploitCapture Stored DataZero-DaySupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Lineage Provisions
bd_3928b2315b9e5450 · schema v1 · pii pii-v1
Full breach record for Lineage Provisions →Delta Dental of California and affiliates experienced a data security incident involving the MOVEit Transfer software. Unauthorized actors exploited a previously unknown vulnerability in the software, accessing and acquiring information between May 27 and May 30, 2023. The company discovered the incident on June 1, 2023. Affected data includes personal and health information. The company engaged forensic experts, notified law enforcement, and is offering 24 months of identity monitoring.
California clockDiscovered Jun 1, 2023 → Notified Nov 27, 2023179d ✗ CA 60-day late36 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-580628
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2024
- Raw hash
- 87915df6d6a48bb0b7e17888073a5cb34ca5a3bc4d467e4f3ba175dfb9a43d0f
Reporting entity
- Name
- Lineage Provisionsnorm: lineage provisions
- Domain
- lineageprovisions.com
Victim entity
- Name
- Lineage Provisionsnorm: lineage provisions
- Domain
- lineageprovisions.com
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Nov 27, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 36 weeks(251 days from discovery to filing)
- Compliance flags
- CA 60-day late · 179d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 1, 2023→ Notified: Nov 27, 2023179d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.