HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICCriticalContained
AmeriHealth Caritas Delaware, Inc.
bd_fc200d149fab8c15 · schema v1 · pii pii-v1
Full breach record for AmeriHealth Caritas Delaware, Inc. →Marigold, a third-party administrator for AmeriHealth Caritas Delaware, experienced a cybersecurity incident on June 28, 2024. An unauthorized party accessed a file server containing personally identifiable information (PII) and protected health information (PHI) of approximately 100,000 individuals. The breach involved the exploitation of a vulnerability in a public-facing application. AmeriHealth Caritas Delaware is notifying affected members and offering 12 months of credit monitoring services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cf150eccb008a41eHHS OCRfiled 2024-07-01Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/07/Member-breach-notification-letter_Marigold_Final_7.1.24.docx
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2024
- Raw hash
- 3676cde67cac75b6e578471f46cd4c7c563f034a51b57f3b9d55f3424d78f9ec
Reporting entity
- Name
- Marigold, Inc.norm: marigold
Victim entity
- Name
- AmeriHealth Caritas Delaware, Inc.norm: amerihealth caritas delaware
Incident
- Discovered
- Jun 28, 2024
- Materiality determined
- Jul 1, 2024
- Notification sent
- —
- Affected individuals
- 100,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.