HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Entergy Corporation Companies' Benefits Plus Medical Plan
bd_df9c143da334caad · schema v1 · pii pii-v1
Full breach record for Entergy Corporation Companies' Benefits Plus Medical Plan →Welltok, Inc. notified Entergy Corporation Companies' Benefits Plus Medical Plan of a data breach involving its MOVEit Transfer server. An unknown actor accessed the server on May 30, 2023, exfiltrating names and other data. Welltok engaged cybersecurity specialists, enhanced privacy policies, and offered Experian credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday34 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-22-entergy-corporation-companies-benefits-plus-medical-plan-progress-software-moveit-data
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2024
- Raw hash
- 00cd2165248b805ab652946ae89f562af2136a775bb0f781694f4eea72f99fa1
Reporting entity
- Name
- Welltoknorm: welltok
- Domain
- welltok.com
Victim entity
- Name
- Entergy Corporation Companies' Benefits Plus Medical Plannorm: entergy corporation companies benefits plus medical plan
Incident
- Discovered
- Jul 26, 2023
- Materiality determined
- —
- Notification sent
- Mar 22, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 34 weeks(240 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.