Life-Health-Dental Insurance · Dental Insurance · Private litigation + Data breach
Delta Dental
Headline
Delta Dental settled with New York's Department of Financial Services for $2.25 million in April 2026 over a breach that reached it through MOVEit - a single flaw in one file-transfer product that produced breaches at…
Delta Dental settled with New York's Department of Financial Services for $2.25 million in April 2026 over a breach that reached it through MOVEit - a single flaw in one file-transfer product that produced breaches at dozens of entirely unrelated organizations across 2023. That is the structural finding worth carrying out of this row: your dental insurer's security posture was not the variable that decided whether your data leaked. A vendor you have never heard of, chosen by someone you will never meet, was. Nothing in the member terms you agreed to gives you any visibility into that supply chain, let alone any say over it.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; the legal tier of its sources has not been assigned yet.
Primary source. www.dfs.ny.gov/reports_and_publications/press_releases/pr20260430 — Verified - primary source confirmed.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual policyholder agreements, separate from the regulatory settlement above.
Data sharing
COMPLETED REGULATORY SETTLEMENT (April 30, 2026): the New York State Department of Financial Services (NYDFS) reached a $2.25 MILLION settlement with Delta Dental Insurance Company AND the separately-licensed nonprofit Delta Dental of New York — specifically over the companies' RESPONSE to the widespread 2023 MOVEit third-party file-transfer software vulnerability (the same underlying MOVEit vulnerability that caused breaches at numerous other organizations broadly, similar to the Comcast/Citrix and other third-party-vendor incidents documented throughout this tracker). This is a REGULATORY settlement (state financial regulator vs. company) rather than a private consumer class action, reflecting NYDFS's specific authority to penalize inadequate breach RESPONSE procedures, not just the underlying vulnerability itself.
Fees and billing
The $2.25M penalty was paid to the STATE REGULATOR, not distributed to affected individual consumers — worth noting this distinction, since NYDFS settlements typically function as regulatory fines rather than consumer compensation funds.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
| Claim | Kind | Support | Sources |
|---|---|---|---|
| 1. Delta Dental settled with New York DFS for $2.25 million. | fact | supported | none recorded |
| 2. The settlement was in April 2026. | fact | supported | none recorded |
| 3. The breach reached Delta Dental through MOVEit. | fact | supported | none recorded |
| 4. The MOVEit flaw produced breaches at dozens of unrelated organizations across 2023. | fact | unsupported | 1 (0 confirmed) |
| 5. Delta Dental's own security posture was not the variable that decided whether data leaked. | fact | contradicted | none recorded |
| 6. A vendor you never heard of decided whether your data leaked. | characterization | n/a | none recorded |
| 7. Member terms give no visibility into or say over the supply chain. | characterization | n/a | none recorded |
0 of 7 claims have a confirmed source of their own.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| none | Claim 4 | Unassigned | not found | No quote recorded. Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy deltadentalins.com/about/privacy-policy.html | Not fetched yet | NO (HTML only) |
| Terms of service deltadentalins.com/about/terms-of-use.html | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source https://www.dfs.ny.gov/reports_and_publications/press_releases/pr20260430 Verification: Verified - primary source confirmed | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.