HackingVulnerability ExploitRansomwareData ExfiltratedData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPHIPIIMediumContained

Vericast

bd_dad1ff71b91b0789 · schema v1 · pii pii-v1

Full breach record for Vericast →

Vericast Digital Corp. filed a supplemental notice with the New Hampshire Attorney General regarding a security incident involving its benefits vendor, Delta Dental. Unauthorized actors exploited a vulnerability in MOVEit file transfer software between May 27-30, 2023, accessing personal information and PHI of Vericast employees and dependents. The incident was discovered by Delta Dental on June 1, 2023. A total of 1,378 individuals were affected, including 2 New Hampshire residents. Vericast notified its employees and authorized Delta Dental to notify affected individuals directly, who provided free identity monitoring services.

Leak gap clock✗ Leak >180d46 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,378 affectedView incident

A leak claim by cl0p about this victim predates this filing by 294 days.View originating leak claim

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/vericast-digital-20240419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2024
Raw hash: 09d6e3bb13f735ca0b772fb18cd0a8875cbcdbf007c6f0dbbed909e2c9e0094f

Reporting entity

Name: Vericast
norm: vericast
Domain: vericast.com

Victim entity

Name: Vericast
norm: vericast
Domain: vericast.com

Incident

Discovered: Jun 1, 2023
Materiality determined: —
Notification sent: Jan 18, 2024
Affected individuals: 1,378
Data types: PHIPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Delta Dental notified your office of the security incident
Third party: via Delta Dental
Initial access: exploit_public_facing

Compliance

Time to disclose: 46 weeks(323 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.