San Diego PACE

Cognisight LLC, a healthcare management services provider for San Diego PACE, disclosed a data breach resulting from the global MOVEit Transfer vulnerability. On May 31, 2023, Cognisight learned of the attack and stopped access to the service. A forensic investigation confirmed that files were taken from the MOVEit server. A subsequent review completed on August 2, 2023, determined that protected health information (PHI) and names of some individuals were impacted. The company restored servers from backups, applied vendor patches, and offered 12 months of credit monitoring and identity protection services to affected individuals.