The Maine Attorney General's Office reported a data breach involving Ciox Health LLC, d/b/a Datavant Group, on February 11, 2025. The breach occurred between May 8 and May 9, 2024, due to a phishing email attack, affecting approximately 49,454 individuals, including 17 Maine residents. Datavant is offering 24 months of credit monitoring and identity theft protection services through Kroll.
TPRM report: https://scoringcyber.rankiteo.com/company/datavant
"id": "dat534072925",
"linkid": "datavant",
"type": "Breach",
"date": "5/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 49454,
'industry': 'Healthcare',
'name': 'Ciox Health LLC, d/b/a Datavant Group',
'type': 'Healthcare'}],
'attack_vector': 'Phishing Email',
'data_breach': {'number_of_records_exposed': 49454,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information'},
'date_detected': '2025-02-11',
'date_publicly_disclosed': '2025-02-11',
'description': "The Maine Attorney General's Office reported a data breach "
'involving Ciox Health LLC, d/b/a Datavant Group, on February '
'11, 2025. The breach occurred between May 8 and May 9, 2024, '
'due to a phishing email attack, affecting approximately '
'49,454 individuals, including 17 Maine residents. Datavant is '
'offering 24 months of credit monitoring and identity theft '
'protection services through Kroll.',
'impact': {'data_compromised': 'Personally Identifiable Information',
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Phishing Email'},
'references': [{'date_accessed': '2025-02-11',
'source': "Maine Attorney General's Office"}],
'response': {'remediation_measures': '24 months of credit monitoring and '
'identity theft protection services',
'third_party_assistance': 'Kroll'},
'title': 'Data Breach at Ciox Health LLC, d/b/a Datavant Group',
'type': 'Data Breach'}