Delta Dental of Virginia
Disclosed Nov 21, 202510 months ago145,918 affectedConfirmed
Delta Dental of Virginia, the covered entity (CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 126,953 individuals. The CE notified HHS, affected individuals, and the media. In response to the incident and OCR’s investigation, the CE implemented additional technical safeguards.
What is known
| People affected | 145,918 (as reported by the organization) |
|---|---|
| Disclosed | Nov 21, 2025 |
| Discovered | Sep 22, 2025 |
| Happened | Mar 21, 2025 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Government IDs, Health, Insurance, Payment cards, Financial, Dates of birth, Addresses, Names |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Delta Dental of Virginiaoag.ca.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004688: Delta Dental of Virginiaoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-11-21 Delta Dental of Virginia Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Delta Dental of Virginiain.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Delta Dental of Virginia (Health Plan, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 21, 2025 | |
| Texas AGresidents of TX | Nov 21, 2025 | 2,374 |
| Vermont AGresidents of VT | Nov 21, 2025 | |
| Indiana AGresidents of IN | Nov 21, 2025 | 628 |
| HHS archivetotal | Nov 21, 2025 | 126,953 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · summary: empty to Delta Dental of Virginia, the covered entity (CE), reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of 126,953 individuals. The CE notified HHS, affected individuals, · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-11-21-delta-dental-virginia-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: [] to ["ssn","government-id","health","insurance","payment-card","financial","dob","addresses","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 145918 · backfill source
- 2026-09-25 · discovered: empty to 2025-09-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.