Delta Dental says data breach exposed info of 7M people
bleepingcomputer.com
Delta Dental says data breach exposed info of 7M people
1–10 of 152 posts
Re: Delta Dental says data breach exposed info of 7M people
#2At this point I'm willing to bet that every single American -- including the Amish -- have been part of at least one major data breach. And for everyone on HN... probably at least ten.
Re: Delta Dental says data breach exposed info of 7M people
#3Wow that MoveIT hack sure was bad. How did they manage to keep from becoming a punching bag like SolarWinds?
Also the title should probably clarify this is Delta Dental of California.
Re: Delta Dental says data breach exposed info of 7M people
#4> who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed.
Delta Dental should be rightly and truly f'd for that one. Storing security codes at all is totally forbidden by PCI rules. Delta Dental should have their ability to process credit cards completely revoked for this egregious breach.
Re: Delta Dental says data breach exposed info of 7M people
#5Surely the data breaches we hear about are the tip of the iceberg?
Just think of what needs to happen after a hack for you to hear about it:
- someone at the company needs to be aware it has happened.
- they need to accurately identify what was accessed.
- they need to disclose that this has happened.
- it needs to be visible enough that it gets picked up and talked about.
Each step of that funnel must have some drop-off that is non-zero. Do we hear about 80% of breaches? 5%?
Honestly I’ve no idea.
Re: Delta Dental says data breach exposed info of 7M people
#6At this point I'm willing to bet that every single American -- including the Amish -- have been part of at least one major data breach. And for everyone on HN... probably at least ten.
I've been part of four or five breaches. My favorite part is the complete lack of value in the mitigations for me. I was part of the OPM data breach, and the data included was literally everything, since it was everything collected as part of my application for a security clearance. A result of that was 10 years of credit monitoring, so every new breach's offer of 12 or 24 months of monitoring is useless.
Until there are statutory damages for data breaches, and even steeper ones for failure to report breaches, companies aren't going to properly safeguard data.
Re: Delta Dental says data breach exposed info of 7M people
#7At this point I'm willing to bet that every single American -- including the Amish -- have been part of at least one major data breach. And for everyone on HN... probably at least ten.
My understanding is about everyone in America (and bizarrely a lot of people in Europe) got f'ed by the Equifax breech already.
Re: Delta Dental says data breach exposed info of 7M people
#8> who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed. Delta Dental should be rightly and truly f'd for that one. Storing security codes at all is totally forbidden by PCI rules. Delta Dental should have their ability to process credit cards completely revoked for this egregious breach.
Yep, that vendor is a major HMO for Defense workers with Top Secret clearances.
Does SiteLink have issues too? I think they do.
Re: Delta Dental says data breach exposed info of 7M people
#9Cool, Delta Dental is one of the few dental insurance providers the VA recommends and offers plans with. Nothing says "we support veterans" like a good old fashioned sell-off of data.
Re: Delta Dental says data breach exposed info of 7M people
#10> who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed. Delta Dental should be rightly and truly f'd for that one. Storing security codes at all is totally forbidden by PCI rules. Delta Dental should have their ability to process credit cards completely revoked for this egregious breach.
Why they are doing their own payments processing is beyond me. Is it just too expensive to use someone like Stripe?