Welltok

Welltok, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a breach of its MOVEit Transfer server. An unknown actor exploited software vulnerabilities to access the server on May 30, 2023, and exfiltrated data. Welltok detected the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. The incident affected approximately 642 New Hampshire residents, whose personal information (including names, addresses, and potentially government IDs) was exposed. Welltok engaged third-party cybersecurity specialists, offered credit monitoring via Experian, and is reviewing its privacy policies.