Westat, Inc.
bd_8839ed78d8414049 · schema v1 · pii pii-v1
Full breach record for Westat, Inc. →2 incidents on fileWestat, Inc. notified Montana residents of a data breach involving third-party vendor MOVEit. A zero-day vulnerability allowed unauthorized copying of data between May 28-29, 2023. Impacted data included names, dates of birth, and Social Security numbers. Westat engaged forensic specialists, applied patches, and offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 28, 2023
Begins
May 30, 2023
Discovered
Jul 21, 2023
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecl0pbd_752092ce6faa5dd32023-07-10 · +11dVerified by operator
Regulatory filings (9) · sorted by filing gap
- Vermont State AGbd_03476d52a3c7f6702023-07-21Verified
- New Hampshire State AGbd_241c67cca32741002023-07-21Verified by operator
- Indiana State AGbd_991dc2d92271be1c2023-07-21Verified by operator
- Maine State AGbd_be6506ff947b42aa2023-07-21Candidate
Show 5 more filings ↓Show fewer ↑up to 105d gap
- Massachusetts State AGbd_f7f9fd512c2dec0d2023-07-21Verified by operator
- Indiana State AGbd_4027da82b6e67c622023-10-13 · +84dVerified
- HHS OCRbd_5b63e0b82f445a712023-10-13 · +84dVerified
- South Carolina State AGbd_2e1ea343e7bb4ee72023-10-16 · +87dVerified by operator
- HHS OCRbd_0a5c6e5ef62bfc8d2023-11-03 · +105dCandidate
Filing propagation · 10 filings · 8 states
View merged incident ↗Pattern: first filing Jul 21 (VT), last Nov 3 (MD) — a 105-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.