A dental benefits insurer is the latest healthcare name on a leak page run by one of the newer ransomware brands, and the group says the data is already out.
The posting names Delta Dental of Missouri and describes a customer relationship database with roughly 48,500 distinct email addresses and about 17,900 phone lines, plus member and subscriber service records carrying full names, Social Security numbers, dates of birth, home addresses and dental treatment details. Employer group client records and the broker channel that serves those groups are also claimed. The listing is marked unpaid and exposed, which in this gang’s usage means the clock has run out.
Delta Dental of Missouri, a dental benefits carrier operating in a state where several such plans compete for employer contracts, has not publicly confirmed an intrusion. Multiple trackers logged the claim on November 5 and record an attack date the same day, a same-day timeline that is more consistent with a listing than with a completed forensic review.
Dental insurers sit on a data set hospitals do not: plan-level treatment history joined to member identity and, in group records, the broker relationships that reach every employer client. That combination is attractive for benefit fraud, where a stolen member identifier can be used to bill for procedures that were never performed. For clinical providers, a carrier compromise also means eligibility and claims lookups may degrade while the insurer rebuilds.
MedRisk could not independently confirm the intrusion. A leak-site claim is an allegation by a criminal group, not a verified breach, and n0n has a record of posting high volumes of claims in short bursts.
