“Based on this, the data breach has so far impacted 6,928,932 customers of Delta Dental of California, who had their names, financial account numbers, and credit/debit card numbers, including security codes, exposed.”
Clop pulled the data through a MOVEit SQL injection between May 27 and May 30. Delta Dental knew by June 6 and took until November 27 to count the victims. A dental insurer kept card security codes it had no business storing. Customers get 24 months of credit monitoring for a stolen CVV that never expires from the thief’s spreadsheet.