Delta Dental of California
Disclosed Jul 12, 20237,056,189 affectedConfirmed
MOVEit breach exposes financial and card data of 6.9 million dental members
Delta Dental of California and affiliates said attackers accessed and took data through the MOVEit Transfer flaw between May 27 and May 30, 2023. Its investigation, completed November 27, found 6,928,932 people had names and financial account or payment card numbers exposed.
What is known
| People affected | 7,056,189 (as reported to HHS) |
|---|---|
| Disclosed | Jul 12, 2023 |
| Discovered | Jun 1, 2023 |
| Happened | May 27, 2023 |
| Attack | Supply chain |
| Data exposed | NamesFinancialPayment cardsHealth |
| Sector | Insurance · US |
| Status | Confirmed |
| Part of | Moveit (2023) |
Sources
Washington Attorney General breach notice: Delta Dental of CaliforniaNotice letter filed with the Delaware DOJ: Delta Dental of CaliforniaOregon DOJ breach notice: Delta Dental of CaliforniaCalifornia AG breach notice: Delta Dental of California and affiliatesDelta Dental of California data breach exposed info of 7 million peopleHHS OCR breach report (archive, resolved): Delta Dental of California (Health Plan, CA)
Notices filed
Same campaign
Other breaches at Delta Dental of California
History of this record
["names","financial","payment-card"] to ["names","financial","payment-card","health"]by backfillSource
organization to hhsby backfillSource
6928932 to 7056189by backfillSource
empty to moveit-2023by seedSource
health to insuranceby seedSource
hacking to supply-chainby seedSource
["names"] to ["names","financial","payment-card"]by seedSource
empty to organizationby seedSource
empty to 6928932by seedSource
empty to Delta Dental of California and affiliates said attackers accessed and took data through the MOVEit Transfer flaw between May 27 and May 30, 2023. Its investigation, completed November 27, found 6,928,932 people had names and financial accouby seedSource
empty to MOVEit breach exposes financial and card data of 6.9 million dental membersby seedSource
[] to ["names"]by backfillSource
2023-12-14 to 2023-07-12by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.