Delaware Insurance Commissioner: Data Breach – 95,000 Delawareans Impacted

DOVER, Delaware, June 26 -- Delaware Insurance Commissioner Trinidad Navarro issued the following news:

The Delaware Department of Insurance recently received notice of a data security breach suffered by Dominion National, an insurer and administrator of dental and vision benefits. On April 24, 2019, through its investigation of an internal alert, Dominion National discovered that servers containing enrollment data, demographic details, and personal information of consumers, plan producers, and healthcare providers may have been accessed by an unauthorized party. The investigation determined that the unauthorized access may have occurred as early as August 25, 2010. Dominion National advised the Department of Insurance that they responded immediately by cleaning the affected servers and initiating a comprehensive review of data stored on or potentially accessible from the servers.

Commissioner Trinidad Navarro stated, "Upon receiving notice of this breach, I asked that our market conduct division begin an investigation to learn all of the facts behind this incident. The Department of Insurance will determine if appropriate safeguards were in place, and if private consumer information was handled properly."

On June 17, 2019, the comprehensive review determined that the potentially compromised information might include the following data: names, addresses, dates of birth, email addresses, Social Security numbers, taxpayer identification number, bank account and routing numbers, member ID numbers, group numbers, and subscriber names of what amounts to 10% of Delaware's population. This number reflects those who are current or former members of Dominion National or of insurance plans administered through Dominion National. It is important to note that some affected by the data breach may not have had a plan through Dominion National, but had a plan for which Dominion National was the third-party administrator.

According to Dominion National, there is "no evidence that any information was in fact accessed, acquired, or misused." The company has implemented enhanced monitoring and alerting software and is providing 2 years of free credit monitoring and fraud protection services for all individuals potentially impacted by the incident. Dominion National has posted a security notice online at dominionnationalfacts.com. Additional help and information can be obtained from the company's dedicated incident response line at 877-503-8923. TTY/TDD users can call 844-261-6819. The dedicated incident response line is open Monday through Friday, 8 a.m. to 8 p.m.