Delta Dental of California

Delta Dental of California experienced a significant data breach impacting over 6.9 million individuals due to a vulnerability in the MOVEit file transfer software application. The breach occurred between May 27 and May 30, 2023, when the Cl0p ransomware gang exploited a zero-day SQL injection vulnerability, CVE-2023-34362, in the MOVEit software, which is widely used for secure file transfers[1][2][5][7].

The compromised information includes names, addresses, Social Security numbers, driver’s license numbers, state identification numbers, passport numbers, financial account details, tax identification numbers, health insurance policy numbers, and health information[1][2][7]. Delta Dental began notifying affected individuals and offered 24 months of free credit monitoring and identity theft protection services[1][4][5][7].

Delta Dental of California, founded in 1955, is a major dental insurance provider serving millions of Americans across nearly all 50 states[3]. The company has taken steps to contain and remediate the incident, including notifying law enforcement, engaging third-party computer forensics experts, and enhancing monitoring capabilities[1][2][8].

The MOVEit vulnerability has affected more than 2,680 organizations and close to 91 million individuals worldwide, with Delta Dental’s breach being the third-largest reported incident related to this specific hack[1][2]. The breach has led to calls for organizations to regularly update software, patch vulnerabilities promptly, and adopt a proactive cybersecurity posture[2][6].

Affected individuals are advised to remain vigilant, monitor their financial accounts, and report any suspicious activity. They should also be cautious of unsolicited communications, as their data may have been shared with cybercriminals[3][5]. Delta Dental has provided a dedicated number for questions or concerns related to the incident: 800-693-2571[8].

Citations:

1. https://www.securityweek.com/delta-dental-of-california-discloses-data-breach-impacting-6-9-million-people/
2. https://www.scmagazine.com/news/delta-dental-of-california-discloses-nearly-7m-patients-affected-in-moveit-hack
3. https://www.idstrong.com/sentinel/delta-dental-of-california-hit-by-data-breach/
4. https://ucnet.universityofcalifornia.edu/news/2023/12/letter-to-the-uc-community-regarding-the-delta-dentalmoveit-data-breach.html
5. https://www.bleepingcomputer.com/news/security/delta-dental-of-california-data-breach-exposed-info-of-7-million-people/
6. https://abyde.com/abyde-insights-managing-the-aftermath-of-the-delta-dental-moveit-breach/
7. https://www.hipaajournal.com/delta-dental-california-data-breach/
8. https://www1.deltadentalins.com/content/dam/ddins/en/pdf/banners/notice-of-moveit-data-security-incident-en.pdf
9. https://www.kens5.com/article/news/verify/delta-dental-california-data-breach-texas-impact/273-d893fc6a-b838-4d07-9d65-58e0b6d5cf75
10. https://www.sacbee.com/news/local/health-and-medicine/article283100123.html
11. https://health.ucdavis.edu/healthcare-professionals/news/headlines/letter-to-the-uc-community-regarding-the-delta-dentalmoveit-data-breach/2023/12
12. https://ucnet.universityofcalifornia.edu/news/2023/12/uc-update-on-march-2023-delta-dental-data-breach.html
13. https://www.jdsupra.com/legalnews/delta-dental-of-california-files-notice-4352694/
14. https://healthitsecurity.com/news/delta-dental-of-california-moveit-hack-impacts-7m-individuals