Dental insurance giant Delta Dental of California is informing more than 6.9 million individuals that their personal information was compromised as result of the MOVEit hacking incident.
In notification letters it started sending out last week to the impacted individuals, the dentist network says the attackers stole names, addresses, Social Security numbers, passport numbers, state identification numbers, financial account details, tax identification numbers, and health insurance and health information.
The information was compromised after the Cl0p ransomware gang exploited a vulnerability in the MOVEit Transfer managed file transfer application to tap into the data organizations were transferring using the service.
In an incident notice posted on its website, Delta Dental says it was alerted of the MOVEit hack on June 1, and that its investigation determined in July that the attackers had access to its information on the service between May 27 and May 30.
The company also outlines the steps taken to contain and remediate the incident and urges the impacted individuals to remain vigilant of any suspicious activity on their accounts, while offering them free identity monitoring services.
Delta Dental offers individual and group dental insurance plans, with more than 85 million people across the US using its services.
The company says it has the largest network of dentists in the country.
According to cybersecurity firm Emsisoft, a total of more than 2,680 organizations are confirmed to have been affected by the MOVEit hack, with the number of impacted individuals being close to 91 million.
With more than 6.9 million people impacted, Delta Dental's MOVEit data breach is the third largest.
The top two spots are taken by government services provider Maximus, with 11 million affected individuals, and healthcare SaaS provider Welltok, with approximately 8.5 million.
This Cyber News was published on www.securityweek.com. Publication date: Mon, 18 Dec 2023 13:13:22 +0000