Data Media Associates

HHS OCR breach portal entry: Data Media Associates (GA, Business Associate), 2,035 individuals affected, reported 2023-10-09. Type: Unauthorized Access/Disclosure; Location: Paper/Films. Web description attributes the underlying incident to business associate NASCO, which reported a software application exposed PHI of 1,744,655 individuals (names, DOB, addresses, SSNs, diagnoses, claims and health insurance/treatment information). Note: the 1,744,655 figure refers to NASCO's overall reported breach population, while this specific OCR row lists 2,035 individuals tied to Data Media Associates.

Data Media Associates, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2023-06-04 and filed notice on 2023-09-25. 657 Washington residents were affected. 113 days elapsed between awareness and notification.

Data Media Associates, LLC was impacted by the MOVEit vulnerability exploit between May 31 and June 1, 2023. The breach was discovered on June 30, 2023, and exposed the names and Social Security numbers of 133 Maine residents. The company offered affected individuals 12 months of identity theft protection services.

Data Media Associates, LLC notified Delaware AG on August 23, 2023, of a data security incident involving the MOVEit Transfer software vulnerability. The incident, discovered in June 2023, potentially exposed protected health information (PHI) and personal data of individuals associated with DMA's healthcare clients. DMA patched the system, engaged external experts, and is notifying affected individuals.

Data Media Associates reported to HHS on 2023-08-24 a Hacking/IT Incident affecting 100,644 individuals. Breached information located on Network Server. A software application exposed PHI including names, addresses, SSNs, and health insurance info. The BA notified HHS, individuals, and media, and strengthened technical safeguards.

Data Media Associates, LLC disclosed a data breach affecting protected health information due to the exploitation of a critical vulnerability in MOVEit Transfer software. The incident occurred between May 31 and June 1, 2023, and was discovered in June 2023. Affected data may include names, addresses, health insurance IDs (potentially SSNs), and other PHI. The company patched the system, engaged external experts, and offered identity theft protection services.

Data Media Associates reported a data breach to the Montana Attorney General. The breach was reported on 2023-08-23. The breach occurred from 5/29/2023 to 5/30/2023. 33 Montana residents were affected.

Data Media Associates, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-23. 74,730 individuals were affected.

Data Media Associates, LLC (DMA) notified Delaware residents of a data security incident involving its MOVEit Transfer software. In June 2023, DMA discovered a critical vulnerability in the managed file transfer solution and patched the system. An investigation revealed that unauthorized actors acquired certain data, potentially including protected health information (PHI), names, and government IDs. DMA engaged external experts, patched the system, and is evaluating additional safeguards. The incident affected approximately 2,500 organizations worldwide.

Data Media Associates, LLC reported a data breach affecting 131 Maine residents. The incident occurred between May 31, 2023, and June 1, 2023, and was discovered on June 30, 2023. The compromised information included names and Social Security numbers. The company offered 12 months of identity theft protection services through IDX.

Data Media (GA), a Business Associate, reported to HHS OCR on 2014-02-28 a breach of type 'Other' affecting 600 individuals. The breached information was located on an 'Other' medium. No further details are available from the HHS web description.