HackingVulnerability ExploitN-DayData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
Delta Dental
bd_9e88312a77fdbd76 · schema v1 · pii pii-v1
Full breach record for Delta Dental →Delta Dental of California affiliates reported a data security incident involving the MOVEit file-transfer software. Unauthorized actors exploited a vulnerability between May 27-30, 2023. The company discovered the incident on June 1, 2023, engaged forensic experts, and notified law enforcement. Personal information was acquired. Affected individuals were offered 24 months of identity monitoring via Kroll.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_84d913a18ea5d62dCalifornia State AGfiled 2024-01-31(7d gap)Candidate
- bd_f9dd9d8c0025c2d4Vermont State AGfiled 2024-02-09(16d gap)Verified
- bd_b7d1eba67d9b0325California State AGfiled 2023-12-14(41d gap)Candidate
- bd_ed716715756a4072California State AGfiled 2024-03-14(50d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-vision-20240124.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2024
- Raw hash
- 12b2267c9a8d2688a503204f649dc70fcd14445b04828e59e0e5114fe00f9a99
Reporting entity
- Name
- National Vision Holdings, Inc.norm: national vision
Victim entity
- Name
- Delta Dentalnorm: delta dental
- Domain
- www1.deltadentalins.com
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- Nov 27, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement of the incident and have been cooperating with them
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 34 weeks(237 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.