Nuance Communications, Inc

Nuance Communications, Inc. disclosed a data breach resulting from a previously unknown vulnerability in MOVEit Transfer software provided by third-party vendor Progress Software Corporation. An unauthorized third party exfiltrated data between May 28 and May 29, 2023. Nuance was notified of the vulnerability on May 31, 2023. Affected data included names, dates of birth, medical record numbers, gender, and details about radiology studies (provider, facility, date of service, study identifiers, and study reports). Social Security numbers and financial information were not involved. Nuance secured systems, engaged forensic experts, notified law enforcement, and sent notices to affected individuals starting August 1, 2023.