Datavant

Datavant (Ciox Health LLC) notified Montana residents of a phishing attack on May 9, 2024. Unauthorized access occurred May 8-9, 2024, to a single user's mailbox. Impacted data included names, SSNs, financial accounts, driver's licenses, passports, and health information for patients, employees, and next of kin. Datavant engaged forensic experts, updated security safeguards, and provided 2 years of Kroll identity monitoring services.

DATAVANT filed a data-breach notice with the Illinois Attorney General in January 2025 (case 25-01-107). The register records the breach as discovered on July 11, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Datavant (dba Ciox Health) notified consumers of a phishing attack on May 8-9, 2024 that compromised a single user's mailbox. Impacted data included names, addresses, financial account info, government IDs, and health information. Datavant engaged forensic experts, secured systems, and provided 2 years of Kroll identity monitoring services.

Ciox Health LLC d/b/a Datavant Group reported a phishing incident affecting 10,639 individuals, including 12 Maine residents. Unauthorized access occurred May 8-9, 2024, via a compromised user mailbox. Data exposed included SSNs, financial accounts, health info, and credentials. Datavant engaged forensic investigators, reset credentials, and offered 24 months of Kroll credit monitoring.