Delta Dental of Virginia experienced a data breach where unauthorized access was gained to an email account between March 21, 2025, and April 23, 2025. The breach exposed sensitive personal and protected health information (PHI) of individuals, including names, Social Security numbers, government-issued ID numbers, and PHI. While the company confirmed the incident, they stated there was no evidence of misuse or attempted misuse of the compromised data. The breach was discovered on April 23, 2025, prompting an investigation with cybersecurity experts. Affected individuals were notified via mail on November 21, 2025, with resources provided for credit monitoring and identity protection. Delta Dental implemented additional security measures to prevent future incidents and established a toll-free call center for assistance.
Source: https://www.wvva.com/2025/11/24/delta-dental-notifies-customers-data-breach/
Delta Dental of Virginia cybersecurity rating report: https://www.rankiteo.com/company/delta-dental-of-virginia
"id": "DEL0103501112525",
"linkid": "delta-dental-of-virginia",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare/Dental Insurance',
'location': 'Roanoke, Virginia, USA',
'name': 'Delta Dental of Virginia',
'type': 'Healthcare Insurance Provider'}],
'attack_vector': 'Email Account Compromise',
'customer_advisories': ['Monitor financial accounts and credit reports',
'Place fraud alerts or security freezes if necessary',
'Report suspicious activity to law enforcement and '
'the FTC'],
'data_breach': {'data_exfiltration': 'Potential unauthorized access and '
'acquisition of emails/attachments',
'file_types_exposed': ['Emails', 'Attachments'],
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'State/federal '
'government-issued ID '
'numbers'],
'sensitivity_of_data': 'High (includes SSNs, government IDs, '
'and PHI)',
'type_of_data_compromised': ['Personal Information',
'Protected Health Information '
'(PHI)']},
'date_detected': '2025-04-23',
'date_publicly_disclosed': '2025-11-21',
'description': 'Delta Dental of Virginia discovered suspicious activity in an '
'email account, leading to unauthorized access to emails and '
'attachments containing personal and protected health '
'information. The breach occurred between March 21, 2025, and '
'April 23, 2025, with no evidence of misuse of the exposed '
'data. Affected individuals were notified on November 21, '
'2025.',
'impact': {'brand_reputation_impact': 'Potential reputational harm due to '
'exposure of sensitive personal and '
'health data',
'data_compromised': ['Names',
'Social Security numbers',
'State or federal government-issued ID '
'numbers',
'Protected Health Information (PHI)'],
'identity_theft_risk': 'High (due to exposure of SSNs and PHI)',
'systems_affected': ['Email account']},
'initial_access_broker': {'entry_point': 'Email account compromise'},
'investigation_status': 'Completed (as of public disclosure on 2025-11-21)',
'post_incident_analysis': {'corrective_actions': 'Enhanced security measures '
'implemented (details '
'unspecified)'},
'recommendations': ['Review account statements and credit reports for '
'suspicious activity',
'Notify financial institutions and law enforcement of '
'fraudulent activity',
'Obtain free credit reports from annualcreditreport.com',
'Consider placing a fraud alert or security freeze on '
'credit files',
'Report identity theft to the FTC or state Attorney '
'General',
'Exercise rights under the Fair Credit Reporting Act '
'(FCRA)'],
'references': [{'source': 'WDBJ (Local News)'},
{'source': 'Delta Dental of Virginia Press Release'},
{'source': 'Federal Trade Commission (FTC) - Fair Credit '
'Reporting Act',
'url': 'https://www.consumer.ftc.gov/articles/pdf-0096-fair-credit-reporting-act.pdf'},
{'source': 'Annual Credit Report Service',
'url': 'http://www.annualcreditreport.com'}],
'response': {'communication_strategy': 'Direct mail notifications to affected '
'individuals (sent on 2025-11-21) and '
'public disclosure via press release',
'enhanced_monitoring': True,
'incident_response_plan_activated': True,
'recovery_measures': 'Toll-free call center established for '
'affected individuals (1-833-303-6496, '
'Mon-Fri 8:00 AM–8:00 PM ET)',
'remediation_measures': 'Enhanced security measures implemented '
'to minimize future risk',
'third_party_assistance': 'Independent cybersecurity experts '
'engaged'},
'stakeholder_advisories': 'Toll-free call center (1-833-303-6496) for '
'questions and concerns',
'title': 'Delta Dental of Virginia Data Breach',
'type': 'Data Breach'}