Breachesby GlyphDelta Dental of Virginia
Disclosed Nov 21, 2025145,918 affectedConfirmed
Delta Dental of Virginia, the covered entity (CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 126,953 individuals. The CE notified HHS, affected individuals, and the media. In response to the incident and OCR’s investigation, the CE implemented additional technical safeguards.
What is known
| People affected | 145,918 (as reported by the organization) |
|---|---|
| Disclosed | Nov 21, 2025 |
| Discovered | Sep 22, 2025 |
| Happened | Mar 21, 2025 |
| Attack | Hacking |
| Data exposed | Social Security numbersGovernment IDsHealthInsurancePayment cardsFinancialDates of birthAddressesNames |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Delta Dental of VirginiaTexas Attorney General data security breach report BR-0004688: Delta Dental of VirginiaVermont Attorney General: 2025-11-21 Delta Dental of Virginia Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: Delta Dental of VirginiaHHS OCR breach report (archive, resolved): Delta Dental of Virginia (Health Plan, VA)
Notices filed
History of this record
unknown to hackingby backfillSource
empty to Delta Dental of Virginia, the covered entity (CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 126,953 individuals. The CE notified HHS, affected individuals, by backfillSource
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-11-21-delta-dental-virginia-data-breach-notice-consumersby backfillSource
[] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names"]by backfillSource
empty to organizationby backfillSource
empty to 145918by backfillSource
empty to 2025-09-22by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.