Major healthcare data leak exposes information of 2.6 million individuals

0
40
Cybercriminals leak 234 GB of healthcare data in major security incident
Cybercriminals leak 234 GB of healthcare data in major security incident

A significant cybersecurity incident has come to light after a cybercrime group allegedly published a massive dataset stolen from a leading dental benefits administrator, potentially exposing the personal information of 2.6 million people.

The cybercriminal group reportedly released a 234 GB archive of data after negotiations with the company failed. The organization had previously appeared on the group’s data leak platform in May before the information was made public.

The company confirmed that it is responding to a cybersecurity incident involving unauthorized access to a limited portion of its network. Following the discovery, immediate steps were taken to secure systems, contain the attack, and reduce potential risks. The company stated that its operations remain functional with limited disruption.

“DentaQuest is actively managing a cybersecurity incident involving unauthorized access to a limited portion of our network. Upon discovery of the initial incident, we took immediate action to secure our environment, contain the attack and mitigate the threat.”

The organization is working with cybersecurity specialists, forensic investigators, and law enforcement agencies to determine the full scope of the incident and assess any potential data exposure.

According to a data breach notification service, the leaked information includes 2.6 million unique email addresses along with names, phone numbers, and residential addresses. A large portion of the data reportedly originated from healthcare enrollment files, while some records contained Medicaid IDs and other member-related information.

The cybercrime group behind the leak is known for conducting “pay or leak” extortion campaigns, where stolen data is published if ransom demands are not met. The group has previously targeted several major organizations and is known for using social engineering techniques, including voice phishing, to gain access to corporate systems and cloud-based platforms.

The affected company is one of the largest dental benefits administrators in the United States, serving approximately 32 million Americans. It provides dental and vision benefits across Medicaid, CHIP, Medicare Advantage, and commercial plans, while supporting a network of more than 70 dental practices nationwide.

Authorities continue to investigate the incident as concerns grow over the increasing scale and impact of healthcare-related cyberattacks.

Also read: Viksit Workforce for a Viksit Bharat

Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter

About us:

The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.