Delta Dental of California and affiliates disclosed a data breach following a global security incident linked to the vulnerability in MOVEit file transfer software by Progress Software.
According to a breach notification filed with the Maine Attorney General on December 14, unauthorized actors accessed protected health information.
The exposed data includes individuals' names coupled with a mix of addresses, Social Security numbers, driver's license numbers, state identification numbers, passport details, financial account information, tax identification numbers, individual health insurance policy numbers and/or health-related information.
Delta Dental discovered the breach on June 1 2023, reportedly launching an investigation and taking corrective measures.
On July 6 2023, it was confirmed that unauthorized access occurred between May 27 and May 30, affecting approximately 7 million individuals.
The investigation concluded on November 27 2023, with law enforcement notified.
Claude Mandy, chief evangelist of data security at Symmetry Systems, noted that the delay in detecting, responding to and identifying the accessed data and individuals impacted is unsurprising.
Delta Dental said it is notifying affected individuals and providing support services.
Individuals are advised to monitor financial statements and report suspicious activity.
The MOVEit vulnerability has impacted thousands of organizations globally, from corporations to government agencies.
This Cyber News was published on www.infosecurity-magazine.com. Publication date: Mon, 18 Dec 2023 17:00:24 +0000