Data breach at dental insurer exposed PII of nearly 7 million patients

Dental insurance provider Delta Dental has disclosed a data breach that exposed the data of about 7 million of its customers.

The California-based insurer said it learned of the security incident on June 1, following the cyberattacks leveraging the vulnerability in MOVEit’s file transfer software.

According to a five-month investigation that ended Nov. 27, the company says the breach impacted 6,928,932 customers from Delta Dental of California.

Stolen data includes a combination of patients’ personal, financial and health, including:

- Full names and addresses

- SSNs, passport numbers or driver’s license numbers

- Financial account numbers, credit/debit card numbers alongside security codes

- Tax identification numbers, individual health insurance policy numbers and health information.

“This extensive investigation and analysis of the data recently concluded and was a critical component in enabling us to identify specific personal information that was acquired from the MOVEit platform,” the data breach notice reads. “Upon that determination, we have worked diligently to identify any impacted individuals to provide notification. Our investigation found that approximately 7 million individuals were impacted. In addition to our own investigation, we have also notified law enforcement of the incident and have been cooperating with them since. The investigation into the affected information was completed on Nov. 27, 2023.”

Impacted customers are urged to remain vigilant, take security measures such as regularly monitoring and reviewing bank accounts and credit reports, and immediately report suspicious activity to their financial institution.

If you want to improve your privacy and safeguard your identity against the waves of data breaches exposing your personal information, we recommend checking Bitdefender’s Digital Identity Protection service.

You can immediately check if your personal info is exposed from older data breaches and receive real-time alerts whenever your data is leaked online as part of a new breach. With our identity protection tool, you never lose track of sensitive elements of your digital footprint if they are unwittingly exposed online.