HackingVulnerability ExploitData ExfiltratedData EncryptedPHIHEALTH_BASICPIIIDENTITY_BASICLowContained

Data Media Associates

bd_8be62e38447897d8 · schema v1 · pii pii-v1

Full breach record for Data Media Associates →

Data Media Associates, LLC notified Delaware AG on August 23, 2023, of a data security incident involving the MOVEit Transfer software vulnerability. The incident, discovered in June 2023, potentially exposed protected health information (PHI) and personal data of individuals associated with DMA's healthcare clients. DMA patched the system, engaged external experts, and is notifying affected individuals.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_30963eb787b1cdd8HHS OCRfiled 2023-08-24(6d gap)Verified
bd_721a9fed6d650d0bMontana State AGfiled 2023-08-23(7d gap)Verified
bd_9629ce6ff1f3e5c8Oregon State AGfiled 2023-08-23(7d gap)Candidate

Source provenance

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/09/DMA-Notification-Letter_DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2023
Raw hash: fab2a0c3d5a91339b6695f8429542c45d4e4b2e41e602616bea6b5565b0587da

Reporting entity

Name: Data Media Associates
norm: data media associates

Victim entity

Name: Data Media Associates
norm: data media associates

Incident

Discovered: Jun 1, 2023
Materiality determined: —
Notification sent: Aug 23, 2023
Affected individuals: Not disclosed
Data types: PHIHEALTH_BASICPIIIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

Compliance

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.