Each impacted covered entity has reported the breach to the HHS Office for Civil Rights.
It is known that protected health information for around 173,000 people was compromised.
The following PDA organisations have informed HHS of affected patient numbers:
Florida: 18626, Georgia: 23974, Illinois: 16673, Massachusetts: 607, Michigan: 26054, Indiana: 7359, Connecticut: 6237, Tennessee:11217, New York: 10778, and Texas: 4235.
The impacted accounts were secured right away to stop further unwanted access.
After employees responded to phishing emails, an investigation was opened, which discovered multiple email accounts were accessed by an unauthorised person.
The compromised information includes names, addresses, email addresses, phone numbers, insurance information, Social Security numbers, dental information, and/or financial information.
Professional Dental Alliance says the electronic dental record system and dental images were not accessed.
Affected individuals have been urged to take caution, check their credit reports and account statements, and keep an eye out for any indications that their data has been misused.
According to Professional Dental Alliance, affected people will receive a free two-year membership to credit monitoring and identity theft protection services.
TPRM report: https://scoringcyber.rankiteo.com/company/dental-care-alliance
"id": "den1056291122",
"linkid": "dental-care-alliance",
"type": "Breach",
"date": "04/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 173000,
'industry': 'Dental Care',
'name': 'Professional Dental Alliance',
'type': 'Healthcare'},
{'customers_affected': 18626,
'industry': 'Healthcare',
'location': 'Florida',
'name': 'Florida',
'type': 'State'},
{'customers_affected': 23974,
'industry': 'Healthcare',
'location': 'Georgia',
'name': 'Georgia',
'type': 'State'},
{'customers_affected': 16673,
'industry': 'Healthcare',
'location': 'Illinois',
'name': 'Illinois',
'type': 'State'},
{'customers_affected': 607,
'industry': 'Healthcare',
'location': 'Massachusetts',
'name': 'Massachusetts',
'type': 'State'},
{'customers_affected': 26054,
'industry': 'Healthcare',
'location': 'Michigan',
'name': 'Michigan',
'type': 'State'},
{'customers_affected': 7359,
'industry': 'Healthcare',
'location': 'Indiana',
'name': 'Indiana',
'type': 'State'},
{'customers_affected': 6237,
'industry': 'Healthcare',
'location': 'Connecticut',
'name': 'Connecticut',
'type': 'State'},
{'customers_affected': 11217,
'industry': 'Healthcare',
'location': 'Tennessee',
'name': 'Tennessee',
'type': 'State'},
{'customers_affected': 10778,
'industry': 'Healthcare',
'location': 'New York',
'name': 'New York',
'type': 'State'},
{'customers_affected': 4235,
'industry': 'Healthcare',
'location': 'Texas',
'name': 'Texas',
'type': 'State'}],
'attack_vector': 'Phishing',
'customer_advisories': ['Affected individuals have been urged to take '
'caution, check their credit reports and account '
'statements, and keep an eye out for any indications '
'that their data has been misused'],
'data_breach': {'number_of_records_exposed': 173000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'email addresses',
'phone numbers',
'insurance information',
'Social Security numbers',
'dental information',
'financial information']},
'description': 'A data breach at Professional Dental Alliance resulted in the '
'compromise of protected health information for around 173,000 '
'individuals. The breach occurred after employees responded to '
'phishing emails, which led to unauthorized access to multiple '
'email accounts. The compromised information includes names, '
'addresses, email addresses, phone numbers, insurance '
'information, Social Security numbers, dental information, '
'and/or financial information. The electronic dental record '
'system and dental images were not accessed.',
'impact': {'data_compromised': ['names',
'addresses',
'email addresses',
'phone numbers',
'insurance information',
'Social Security numbers',
'dental information',
'financial information'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': ['email accounts']},
'initial_access_broker': {'entry_point': 'Phishing emails'},
'post_incident_analysis': {'corrective_actions': ['Secured impacted accounts '
'to stop further unwanted '
'access',
'Provided free two-year '
'membership to credit '
'monitoring and identity '
'theft protection services'],
'root_causes': ['Phishing emails']},
'references': [{'source': 'Professional Dental Alliance'}],
'regulatory_compliance': {'regulatory_notifications': ['Each impacted covered '
'entity has reported '
'the breach to the HHS '
'Office for Civil '
'Rights']},
'response': {'communication_strategy': ['Affected individuals have been urged '
'to take caution, check their credit '
'reports and account statements, and '
'keep an eye out for any indications '
'that their data has been misused'],
'containment_measures': ['Secured impacted accounts to stop '
'further unwanted access'],
'remediation_measures': ['Provided free two-year membership to '
'credit monitoring and identity theft '
'protection services']},
'title': 'Professional Dental Alliance Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Human vulnerability'}