HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
DELTA DENTAL OF CALIFORNIA
bd_c3823867bfe6e8aa · schema v1 · pii pii-v1
Full breach record for DELTA DENTAL OF CALIFORNIA →Delta Dental of California disclosed a data security incident involving the MOVEit file-transfer software. Unauthorized actors exploited a vulnerability in the software between May 27 and May 30, 2023. The company discovered the incident on June 1, 2023, and confirmed unauthorized access to personal information on July 6, 2023. Notifications to affected individuals began on November 27, 2023. The breach involved identity and government-issued data. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/03/Delta-Dental.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- 36c070593389396b3254d67d9266f4a20c937442c6734647ecfaa8ee148970de
Reporting entity
- Name
- DELTA DENTAL OF CALIFORNIAnorm: delta dental of california
- Domain
- deltadentalca.com
Victim entity
- Name
- DELTA DENTAL OF CALIFORNIAnorm: delta dental of california
- Domain
- deltadentalca.com
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Nov 27, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- notified law enforcement of the incident and have been cooperating with them
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.