Delta Dental of California and its affiliates are warning of a data breach affecting nearly seven million patients. The leak resulted from a breach of its MOVEit Transfer.
Delta Dental of California is a dental insurance provider serving 45 million people in 15 states. It is part of the Delta Dental Plans Association.
The provider sent out a data breach notification , saying it suffered unauthorized access through its MOVEit file transfer software. The software was vulnerable to a zero-day SQL injection vulnerability ( CVE-2023-34362 ), which was widely used by the Clop ransomware gang to compromise thousands of organizations around the world.
See also: MongoDB: Customer data breach after cyberattack
Delta Dental of California learned of the breach on June 1, 2023, and five days later, confirmed that unauthorized users had accessed and stolen data from its systems (between May 27 and May 30, 2023).
The investigation into the incident continued until November 27. We now know that the data breach has so far affected 6,928,932 customers Delta Dental of California. Names, bank account numbers, and credit/debit card numbers, including security codes, have been exposed.
Delta Dental of California offers free credit monitoring and identity theft protection for 24 months. Details on how to enroll in the program are in your personal announcements
Delta Dental of California customers should be very careful with any messages or emails, as their data could be used for various scams. The Delta Dental of California data breach is the third largest data breach related to MOVEit software. The top two spots are held by Maximus (11 million) and Welltok (8.5 million).
See also: Idaho National Laboratory: Data breach affects 45,000 people
Consequences of a data breach
A company that has suffered breach faces multiple consequences. First, customer trust can be seriously undermined.
Customers will be concerned about the security of their personal and financial information and may decide not to continue using the company's services. This can lead to a loss of customers and a decrease in the company's revenue.
Additionally, the company may face legal consequences. Depending on applicable law, the company may be subject to fines or face lawsuits from customers affected by the breach of their personal data. This could have serious financial consequences for the company, including the compensation it must pay to customers who have suffered losses.
See also: Data Breaches: A Huge Threat to Businesses
To address these consequences, the company must take immediate steps to restore customer. This may include notifying customers about the breach, offering free credit protection or other security measures, and reaffirming its commitment to protecting customers’ personal data. In addition, the company must strengthen its security measures to prevent future data breaches.
Source: www.bleepingcomputer.com
