UC update on March 2023 Delta Dental data breach

Editor’s note: This article refers to a different data breach than the much larger Delta Dental/MOVEit breach. Learn about the MOVEit breach here.

—

National news outlets have recently been reporting on a data breach that Delta Dental of California, UC’s dental insurance carrier, experienced on March 13, 2023. In July, when UC was made aware of this breach, we immediately partnered with Delta Dental to notify impacted employees (349 systemwide) and ensure the continued safety of employee account information.

In response to the breach:

• UC notified the impacted employees and offered them two years of complimentary identity monitoring services.
• Orrick deployed additional security measures and tools with the guidance of third-party cybersecurity experts to strengthen the ongoing security of their network. 
• Delta Dental also did a thorough analysis their systems and confirmed that they were unaffected. 

What did the breach entail?

Attackers targeted Orrick, Delta Dental’s third-party legal counsel. The hackers accessed affected people’s names, addresses, date of birth, dental insurance group numbers, health care provider information and limited claim-related information. They were not able to gain access to members’ Social Security numbers, financial information, or other personally identifiable information. 

Was my account impacted?

The breach impacted a relatively small segment of employees (349 systemwide). Employees who were affected were all notified in July.

How can I protect myself from identity theft?

The Delta Dental incident was unrelated to employees’ individual actions, but there are steps you can take to help protect yourself from identity theft:

• Pay attention to any notifications from UC, benefits providers or other accounts you have that alert you to a security breach. These notifications are designed to help you protect your personal information. 
• Learn about medical identity theft. Find out how to protect yourself, signs that your information has been compromised, and how to respond if you are a victim. Visit the FTC medical identity theft website and download a helpful brochure (PDF).
• Learn what to do if your personal information is compromised. Visit identitytheft.gov for lists of actions you should take in response to lost or exposed Social Security numbers; online logins or passwords; debit, credit card or banking information; driver’s license information; or children’s personal information.
• Report suspected fraud. If you experience suspected scams or other suspicious activity related to any of your UC-affiliated accounts, follow your location’s reporting protocol.