Delta Dental of Washington listed on 8base leak site

• Ransomware group: 8base
• Country: United States
• Sector: Healthcare
• Announcement date: January 16, 2025

The 8base group claims a data breach at Delta Dental of Washington

The threat actor known as 8base has listed Delta Dental of Washington on its leak site, claiming to have obtained sensitive data belonging to the organization. This announcement marks a significant development in the ongoing activities of the group, which continues to target various sectors.

According to the information provided in the announcement, the 8base group has listed Delta Dental of Washington on its leak site, claiming to have gained access to sensitive data belonging to the organization. The group is employing a double-extortion tactic by threatening to publish the alleged data. While the announcement was posted on January 30, 2025, the group claims that the data exfiltration occurred on January 16, 2025.

Double-extortion is a common tactic used by modern ransomware groups. In this method, attackers do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information before the encryption occurs. The attackers then threaten to leak or sell this stolen data on public forums or leak sites if the ransom is not paid. This adds a layer of pressure on the victim, as the threat of a data leak can cause significant reputational and legal damage, even if the organization can restore its systems from backups.

Alleged data types involved in the incident

The information provided by the threat actor outlines a wide range of sensitive documents and information that they claim to have exfiltrated from the organization. If these claims are verified, the nature of the data suggests a high level of sensitivity regarding individual privacy and medical history.

The alleged leaked data includes the following items:

• Receipts
• Account information
• Medical ID cards
• Service requests
• Patient information
• X-rays
• Insurance documents

The presence of such diverse data types highlights the potential impact of the breach on the individuals whose information is contained within these files. When medical and financial documents are combined, the risk to the subjects increases significantly.

About Delta Dental of Washington

Delta Dental of Washington is a leading dental insurance organization operating in the United States. It aims to facilitate access to oral and dental health services by providing a variety of dental insurance plans for individuals, families, and businesses.

Implications and industry considerations

If the claims made by 8base are verified, the breach could lead to identity theft and fraud risks for the organization's policyholders and employees. Given the extreme sensitivity of health data, such a situation may result in legal consequences under regulations such as HIPAA, which governs the protection of sensitive patient health information.

The double-extortion tactic used by the 8base group may lead to secondary victimization through the sale or disclosure of data to third parties. This makes the threat particularly dangerous for the individuals involved, as their information may resurface in various criminal marketplaces.

The 8base group, which has been active since 2022 and is known to use Phobos-variant encryptors, continues its operations despite the interventions in early 2025. This persistence demonstrates the resilience of certain ransomware groups even when faced with law enforcement or cybersecurity interventions.

For organizations in the healthcare sector, such incidents underscore the necessity of robust security measures. To mitigate these risks, organizations often implement multi-factor authentication, continuous monitoring of network traffic, and strict access controls to limit the movement of attackers within the network. Furthermore, maintaining comprehensive incident response plans and ensuring that sensitive data is encrypted both at rest and in transit are critical defensive steps to prevent unauthorized exfiltration.