Superior Dental Care

Superior Dental Care (SDC), a dental insurance carrier suffered from a data security incident that have resulted in unauthorized access to some of its members’ personal information.

SDC identified suspicious activity within an employee’s email account, steps were taken immediately to secure the email account.

It was determined the employee’s email account was subject to unauthorized access by an unknown party.

Specific information potentially accessed include members’ names, addresses, Social Security numbers, and payment and medical information related to dental services.

Source: https://www.databreaches.net/ohio-dental-insurance-carrier-disclosed-breach-involving-some-members-information/

TPRM report: https://scoringcyber.rankiteo.com/company/superior-dental-care

"id": "sup151413323",
"linkid": "superior-dental-care",
"type": "Data Leak",
"date": "03/2019",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Health Insurance',
                        'name': 'Superior Dental Care',
                        'type': 'Corporation'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Medical Information',
                                              'Payment Information']},
 'description': 'Superior Dental Care (SDC), a dental insurance carrier, '
                'suffered from a data security incident that resulted in '
                'unauthorized access to some of its members’ personal '
                'information. SDC identified suspicious activity within an '
                'employee’s email account and steps were taken immediately to '
                'secure the email account. It was determined the employee’s '
                'email account was subject to unauthorized access by an '
                'unknown party. Specific information potentially accessed '
                'includes members’ names, addresses, Social Security numbers, '
                'and payment and medical information related to dental '
                'services.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Payment information',
                                 'Medical information']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'post_incident_analysis': {'root_causes': 'Unauthorized access to employee '
                                           'email account'},
 'response': {'containment_measures': 'Secured the email account'},
 'threat_actor': 'Unknown Party',
 'title': 'Superior Dental Care Data Security Incident',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account'}