Datavant

The Maine Office of the Attorney General reported a data breach involving Ciox Health LLC, doing business as Datavant Group, on December 6, 2024. The breach, which occurred between May 8 and May 9, 2024, was due to a phishing email attack, affecting approximately 12 Maine residents, with compromised data potentially including Social Security numbers and health information. Datavant offered 24 months of credit monitoring and identity theft protection through Kroll as a response.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d365022f-465e-42f2-ad5d-f4bd91a13d51.html

TPRM report: https://www.rankiteo.com/company/datavant-ciox

"id": "dat543072525",
"linkid": "datavant-ciox",
"type": "Breach",
"date": "5/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 12,
                        'industry': 'Healthcare',
                        'location': 'Maine',
                        'name': 'Ciox Health LLC (Datavant Group)',
                        'type': 'Healthcare'}],
 'attack_vector': 'Phishing Email',
 'data_breach': {'number_of_records_exposed': 12,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'health information']},
 'date_detected': '2024-12-06',
 'date_publicly_disclosed': '2024-12-06',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Ciox Health LLC, doing business as Datavant '
                'Group, on December 6, 2024. The breach, which occurred '
                'between May 8 and May 9, 2024, was due to a phishing email '
                'attack, affecting approximately 12 Maine residents, with '
                'compromised data potentially including Social Security '
                'numbers and health information. Datavant offered 24 months of '
                'credit monitoring and identity theft protection through Kroll '
                'as a response.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'health information']},
 'references': [{'date_accessed': '2024-12-06',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'Kroll'},
 'title': 'Data Breach at Ciox Health LLC (Datavant Group)',
 'type': 'Data Breach'}