On August 23, 2023, Data Media Associates, LLC (“DMA”) filed a notice of data breach with the Attorney General of Maine after discovering that an unauthorized party was able to access confidential consumer information stored on a third-party software platform called MOVEit. In this notice, DMA explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, addresses, medical or health insurance information and health insurance ID numbers, which may be the same as some victims’ Social Security numbers. Upon completing its investigation, DMA began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Data Media Associates, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the MOVEit / Data Media Associates data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach at Data Media Associates?

The Data Media Associates / MOVEit data breach was only recently announced, and more information is expected in the near future. However, DMA’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, on June 4, 2023, DMA learned of an alert issued by the Cybersecurity and Infrastructure Security Agency discussing a critical vulnerability affecting the MOVEit secure file transfer solution, which DMA used in the regular course of business.

After learning about the vulnerability, DMA patched its MOVEit system per the developer’s instructions and launched an investigation to determine what, if any, information was accessed or removed.

On June 30, 2023, the DMA investigation confirmed that certain files within its MOVEit environment were accessed and removed by an unauthorized party. DMA later determined that some of the files that were accessible to the unauthorized party contained confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, Data Media Associates reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, address, medical or health insurance information and health insurance ID number, which may be the same as your Social Security number.

On August 23, 2023, Data Media Associates sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of which information of theirs was compromised.

More Information About Data Media Associates

Founded in 1975, Data Media Associates is a business that provides payment solutions and other services to clients in the healthcare industry. Based in Alpharetta, Georgia, DMA offers statement and letter delivery services, various payment solutions, revenue cycle management services and electronic claims solutions. Data Media Associates employs more than 62 people and generates approximately $11 million in annual revenue.