Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

WellDyneRx

bd_fbaf98a01ac90a99 · schema v1 · pii pii-v1

WellDyneRx, LLC, a pharmacy benefit management company, disclosed a phishing incident affecting email accounts between October 30 and November 17, 2021. Unauthorized access occurred, potentially exposing customer names and government identifiers. WellDyneRx engaged forensic investigators, secured the account, and notified regulators including HHS. Affected individuals were offered credit monitoring via Equifax.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

bd_7b8306e67365da35HHS OCRfiled 2022-07-01Verified
bd_4625bcab516f5e26Maine State AGfiled 2022-07-02(1d gap)Verified
bd_2ee19810ce6ea44bMaine State AGfiled 2022-05-26(36d gap)Candidate
bd_88d8ea977b4ab7dcMontana State AGfiled 2022-05-26(36d gap)Verified by operator

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554879
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2022
Raw hash: 67544a5c182af2c66472407a9e300171066b567ae9fbd6d0231364ac4fd57eda

Reporting entity

Name: WellDyneRx
norm: welldynerx

Victim entity

Name: WellDyneRx
norm: welldynerx

Incident

Discovered: Dec 2, 2021
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified the Department of Health and Human Services
Initial access: phishing_link

Compliance

Time to disclose: 30 weeks(211 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.