HackingHealthcareHealthcareCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Dental Network of America

bd_57e5e6b8e97586e7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 20, 2008

Filed

Mar 10, 2008

To disclose

19 days

Affected

3state residents only

Confidence

67%

Full breach record for Dental Network of America →2 incidents on file

The Dental Network notified New Hampshire residents of a privacy incident where member data (name, SSN, address, DOB) was exposed on its public website for a limited period. The breach was discovered on February 20, 2008. Three New Hampshire residents were affected. The website was taken offline and the vulnerability corrected. The Dental Network engaged Identity Safeguards to provide one year of credit monitoring and fraud restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 days

Feb 20, 2008

Discovered

Mar 10, 2008

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Dental Network of America
norm: dental network of america
Domain: dnoa.com

Name: Dental Network of America
norm: dental network of america
Domain: dnoa.com
Industry: Healthcarellm

Discovered: Feb 20, 2008
Materiality determined: —
Notification sent: Mar 10, 2008
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: TDN website was taken offline immediately
Engaged Identity Safeguards, an organization experienced in addressing such issues, to work on our behalf
Provided a one year membership in Identity Safeguards' protection services
Set-up a dedicated website -http://ids.thedentalnet.org/ -that offers a one-stop site that features answers to questions you may have, as well as online enrollment in the identity theft protection services
Changes made: The issues leading to this breach have been corrected
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/identity-safeguards20080310.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2008
Raw hash: 8f988ee503f2b84d45ba28e32c6271176e69e2e3d8c2f36b8d284bfc74d90d3b

Reporting entityDental Network of America

Victim entityDental Network of America

Incidentdiscovered Feb 20, 2008

Stated responseTDN website was taken offline immediately

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov