DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDCritical

DELTA DENTAL OF CALIFORNIA

bd_b0392e182589e950 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Jul 6, 2023

Filed

Dec 29, 2023

To disclose

25 weeks

Affected · nationwide

6,928,9323 in this filing

Linked

11 filings

Confidence

50%
Full breach record for DELTA DENTAL OF CALIFORNIA →5 incidents on file

Delta Dental of California and its affiliates reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on May 27, 2023. The breach was discovered on July 6, 2023. The compromised information includes names and Social Security numbers. Three Maine residents were affected. Notification to affected consumers was sent on December 14, 2023, and identity theft protection services were offered.

Maine clockDiscovered Jul 6, 2023 → Filed with AG Dec 29, 2023176d ✗ ME AG >90d25 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 40 days
discovery → filing · 25 weeks / 176 days

May 27, 2023

Begins

Jul 6, 2023

Discovered

Dec 29, 2023

Filed

vs. sector median

+13 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 80d gap

Filing propagation · 11 filings · 8 states

View merged incident ↗
Massachusetts State AGDec 14 · first
Oregon State AGDec 14 · first
Vermont State AGDec 14 · first
Montana State AGDec 14 · first
Washington State AGDec 14 · first
Maine State AG+15d · this page
Washington State AG+47d
Montana State AG+55d
Washington State AG+55d
New Hampshire State AG+92d
Hawaii State AG+95d

Pattern: first filing Dec 14 (MA), last Mar 18 (HI) — a 95-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.