Delta Dental of Arizona is notifying an undisclosed number of individuals that their personal and medical data was potentially breached by a phishing attack in July 2019.
An employee of Delta Dental fell victim to a phishing attack giving hacker access to their email account.
The dental insurer discovered suspicious activity on an employee email account and launched an investigation with help from third-party forensic investigators.
They determined an employee fell victim to a phishing scam giving a hacker access to the email account.
The compromised data could include names, contact details, Social Security numbers, member or subscription identification numbers, driver’s licenses, government-issued or state identification numbers, passports, financial account data, dental insurance information, credit or debit information, digital signatures, and or user credentials.
TPRM report: https://scoringcyber.rankiteo.com/company/delta-dental-of-arizona
"id": "del174323423",
"linkid": "delta-dental-of-arizona",
"type": "Breach",
"date": "07/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'Undisclosed',
'industry': 'Healthcare',
'location': 'Arizona',
'name': 'Delta Dental of Arizona',
'type': 'Organization'}],
'attack_vector': 'Phishing',
'data_breach': {'number_of_records_exposed': 'Undisclosed',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Medical Data']},
'description': 'Delta Dental of Arizona is notifying an undisclosed number of '
'individuals that their personal and medical data was '
'potentially breached by a phishing attack in July 2019. An '
'employee of Delta Dental fell victim to a phishing attack, '
'giving hackers access to their email account. The dental '
'insurer discovered suspicious activity on an employee email '
'account and launched an investigation with help from '
'third-party forensic investigators. They determined an '
'employee fell victim to a phishing scam, giving a hacker '
'access to the email account. The compromised data could '
'include names, contact details, Social Security numbers, '
'member or subscription identification numbers, driver’s '
'licenses, government-issued or state identification numbers, '
'passports, financial account data, dental insurance '
'information, credit or debit information, digital signatures, '
'and/or user credentials.',
'impact': {'data_compromised': ['Names',
'Contact details',
'Social Security numbers',
'Member or subscription identification '
'numbers',
'Driver’s licenses',
'Government-issued or state identification '
'numbers',
'Passports',
'Financial account data',
'Dental insurance information',
'Credit or debit information',
'Digital signatures',
'User credentials'],
'systems_affected': 'Email Account'},
'initial_access_broker': {'entry_point': 'Email'},
'investigation_status': 'Investigation Concluded',
'motivation': 'Data Theft',
'post_incident_analysis': {'root_causes': 'Phishing Attack'},
'response': {'third_party_assistance': 'Yes'},
'threat_actor': 'Unknown',
'title': 'Delta Dental of Arizona Phishing Incident',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error'}