GEICO Corporation
bd_712a13d4003ae593 · schema v1 · pii pii-v1
Full breach record for GEICO Corporation →GEICO Corporation reported that its employees were affected by a third-party data breach involving the MOVEit file transfer tool vulnerability. The breach occurred at Delta Dental of California (DDC), which provides dental insurance to GEICO employees. Between May 27, 2023, and May 30, 2023, unauthorized actors exploited the vulnerability and accessed files from DDC's MOVEit server. The breach was discovered by DDC on July 6, 2023. The compromised information included names and driver's license numbers. Affected individuals were offered 24 months of free identity monitoring services.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0da680c8b263f863Indiana State AGfiled 2024-01-29(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4c266e0c-457b-4532-8432-106de106e450.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 31, 2024
- Raw hash
- 9017122486e98900516cdfbc016ac394ca0502a7ec8ae918cf1b4b643783afed
Reporting entity
- Name
- GEICO Corporationnorm: geico
Victim entity
- Name
- GEICO Corporationnorm: geico
Incident
- Discovered
- Jul 6, 2023
- Materiality determined
- —
- Notification sent
- Jan 29, 2024
- Affected individuals
- 34
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 30 weeks(209 days from discovery to filing)
- Compliance flags
- ME AG >90d · 209dME resident >180d · 207d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 6, 2023→ Filed with AG: Jan 31, 2024209d 90 days ME AG >90d Maine Discovered: Jul 6, 2023→ Notified: Jan 29, 2024207d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.