The Delaware Department of Insurance announced Wednesday that essentially 10% of the state's population could have had their personal information exposed to an "unauthorized party," including things like names, addresses, Social Security numbers, and bank account information.
The DOI said, on April 24, 2019, it learned via an internal alert that Dominion National servers containing enrollment data, demographic details, and personal information of consumers, plan producers, and healthcare providers may have been accessed.
The access could have potentially occurred as early as August 25, 2010, officials said.
Dominion National, an administrator of dental and vision benefits, "advised the Department of Insurance that they responded immediately by cleaning the affected servers and initiating a comprehensive review of data stored on or potentially accessible from the servers," the DOI said in a release.
“Upon receiving notice of this breach, I asked that our market conduct division begin an investigation to learn all of the facts behind this incident," said Insurance Commissioner Trinidad Navarro. "The Department of Insurance will determine if appropriate safeguards were in place, and if private consumer information was handled properly.”
On June 17, a comprehensive review concluded compromised information might have included:
- dates of birth
- email addresses
- Social Security numbers
- taxpayer identification number
- bank account and routing numbers
- member ID numbers
- group numbers
- subscriber names
The number affected includes both current and former members of Dominion National. Some affected by the data breach may not even have had a plan through Dominion National, but a plan for which Dominion National was a third-party administrator.
According to Dominion National, there is “no evidence that any information was in fact accessed, acquired, or misused.”
The company has is providing two years of free credit monitoring and fraud protection services for all individuals potentially impacted by the incident. A security notice has been posted online at dominionnationalfacts.com, but those seeking additional information can call 877.503.8923 or 844.261.6819.