Welltok

Welltok, Inc. disclosed that an unknown actor exploited software vulnerabilities in its MOVEit Transfer server on May 30, 2023, exfiltrating data including names, dates of birth, phone numbers, treatment/diagnosis information, prescription information, provider names, medical record numbers, and health insurance information. The company was alerted to the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. Welltok engaged third-party cybersecurity specialists, reconstructed systems, and is offering 12 months of credit monitoring via Experian to affected individuals. The incident impacts residents of California and Rhode Island, among others.