Thousands including children exposed in major data breach — names, addresses, Social Security numbers and more accessed by hackers

An open lock depicting a data breach
(Image credit: Shutterstock)

Hackers primarily target adults as their accounts as well as their personal and financial information is worth a lot more. However, even children can inadvertently end up being victims of cybercrime which is exactly what happened with a recent data breach that exposed the information of thousands of minors online.

As reported by Cybernews, the health IT company Datavant has revealed that it recently fell victim to a data breach back in May. However, instead of targeting its systems, the hackers behind this attack first went after the email accounts of its employees.

In an effort to steal credentials, the hackers sent out a wave of emails in a targeted phishing attack. Though most of Datavant’s employees were able to identify the clear signs of a phishing email, a few weren’t, and as a result, the hackers got their hands on the credentials to one of the company’s email accounts.

Here’s everything you need to know about this latest data breach including what you should do next if your child’s information was exposed, along with some tips and tricks on how to stay safe from hackers.

Minor’s personal data exposed

According to a data breach notification letter from the Office of the Vermont Attorney General, the hackers gained unauthorized access to data contained within a single user’s inbox between May 8 and 9 of this year.

Even though Datavant managed to catch the intrusion quickly, an investigation after the fact revealed that the personal and financial information of more than 11,000 individuals was exposed. Here is all of the information the hackers managed to obtain in the attack:

  • Names
  • Addresses
  • Contact details
  • Social Security numbers
  • Financial account information
  • Driver’s licenses
  • Passports
  • Health information

What makes this particular data breach so devastating is that all of the victims are minors and their information could be used for additional targeted phishing attacks, scams or to commit identity fraud. For instance, the hackers could use this info to commit medical identity theft. Unlike with regular identity theft, medical identity theft involves submitting forged claims to Medicare and a person’s insurance provider.

What to do next and how to stay safe after a data breach

A nervous woman looking at her phone

(Image credit: Shutterstock)

Datavant has now added additional safeguards to its systems as well as trained employees on how to better spot a phishing email in order to avoid another incident like this one in the future. Unfortunately for the children and families caught up in this data breach, the damage is already done.

To help protect these victims further, Datavant is providing free access for two years to the best identity theft protection from Kroll. As part of this offer, victims will get credit monitoring, fraud consultation and identity theft restoration services.

As Datavant works with 70,000 hospitals and clinics across the U.S., there’s a chance your children’s data may have been exposed. If that’s the case, you’ll receive a data breach notification letter in the mail like the one linked above, so you want to keep a close eye on your mailbox if you have children.

Inside the letter, you’ll find all the information you need to sign up for Kroll’s identity monitoring services along with a membership number to activate your free, 2-year account. This letter will also include the deadline for when you have to sign up by.

While we haven’t reviewed this particular service yet, they have an A- rating with the Better Business Bureau and have been in business for 29 years.

At the same time, you'll want to keep a close eye on your inbox as it’s highly likely that hackers will use all of this stolen info in phishing attacks. Look out for emails from unknown senders as well as ones that try to instill a sense of urgency to get you to click a link or to download an attachment.

Likewise, you'll want to make sure that you’re using the best antivirus software to protect your PC, the best Mac antivirus software to protect your Mac and one of the best Android antivirus apps to protect your Android phone. The reason being is that malicious links or attachments in those inevitable phishing emails could contain malware that can infect your devices.

Even though it may seem unnecessary or overly expensive at times, one reason that families might want to sign up for identity theft protection is that many of these services look out for signs that the Social Security numbers of your children could be being misused online.

Hackers are going to keep trying to steal your personal and financial information due to just how valuable it is, which is why you need to educate yourself and your children in the best ways to stay safe online. It might seem tedious at times but by knowing how to spot a potential attack, you’re much less likely to fall for one.

More from Tom's Guide

Anthony Spadafora
Managing Editor Security and Home Office

Anthony Spadafora is the managing editor for security and home office furniture at Tom’s Guide where he covers everything from data breaches to password managers and the best way to cover your whole home or business with Wi-Fi. He also reviews standing desks, office chairs and other home office accessories with a penchant for building desk setups. Before joining the team, Anthony wrote for ITProPortal while living in Korea and later for TechRadar Pro after moving back to the US. Based in Houston, Texas, when he’s not writing Anthony can be found tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
A hacker typing quickly on a keyboard
Half a million medical patients just had their addresses, dates of birth, SSNs and more stolen by hackers — how to stay safe
A picture showing different credit cards stacked on top of each other on a table
5 million Americans just had their credit card details leaked online — what to do now
An open lock depicting a data breach
Massive healthcare data breach just exposed the personal info of 1 million Americans — what to do now
Image of man on computer with data security ecosystem
Over 900,000 Americans just had their personal and health info exposed in medical data breach — names, phone numbers, treatments and SSNs
An open lock depicting a data breach
3.5 million hit in major law firm data breach — full names, SSNs, dates of birth, addresses and more exposed
children in school on their laptops with teacher in front of class
I'm a security editor and after the massive 70 million PowerSchool data breach — I started asking questions about how it affects my kids
Latest in Online Security
iPhone 15 Pro Max shown in hand
Apple just released emergency security update for flaw used in ‘extremely sophisticated’ attacks — update your iPhone, iPad and Mac right now
A person trying to set up a new Wi-Fi router
Thousands of TP-Link routers have been infected by a botnet to spread malware
An image of a CAPTCHA
Hackers are using reCAPTCHA to trick users into infecting their own PCs with malware — how to stay safe
A smartphone screen displaying the Android name and logo next to a sign reading 'MALWARE'.
Fake Google Play Store pages are spreading Trojan malware that can steal your financial data
Best antivirus software
How does antivirus software work
and image of the Google Chrome logo on a laptop
Google Chrome at risk from shape-shifting browser extensions — how to stay safe
Latest in News
Samsung Galaxy S25 Edge back
Samsung Galaxy S25 Edge price comes into focus with latest leak
iPhone 15 Pro Max shown in hand
Apple just released emergency security update for flaw used in ‘extremely sophisticated’ attacks — update your iPhone, iPad and Mac right now
NYTimes Connections
NYT Connections today hints and answers — Wednesday, March 12 (#640)
Jean Smart as Deborah Vance and Hannah Einbinder as Ava Daniels in Hacks
Max reveals 'Hacks' season 4 release date and trailer — here's when it's coming
Google Pixel 5 review
Google Pixel 10 lineup leaked in new renderings — here's what they look like
A person trying to set up a new Wi-Fi router
Thousands of TP-Link routers have been infected by a botnet to spread malware