Westat, Inc.
ent_019e0b1faccff9fd4082ccabca381345
Disclosures
6
HHS OCR · State AG · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
51,513
as filed · HHS OCR MD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Westat, Inc.
- Normalized
- westat— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900Y1ECN4S1DGCL87
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- MARYLANDHHS OCRas victim2023-11-03
Westat, Inc. reported to HHS on 2023-11-03 a Hacking/IT Incident affecting 20045 individuals. Breached information located on Network Server. A software application used by a business associate exposed PHI including names, addresses, DOB, claims, diagnoses, and treatment info. BA provided credit monitoring and enhanced safeguards.
- MARYLANDHHS OCRas victim2023-10-13
Westat, Inc. reported to HHS on 2023-10-13 a Hacking/IT Incident affecting 51,513 individuals. A software application used by its business associate exposed PHI including names, addresses, dates of birth, claims information, diagnoses/conditions, and treatment information. Breached information located on a Network Server. The BA notified HHS and affected individuals, provided substitute notice, and offered complimentary credit monitoring services.
- 🍁Vermont State AGas victim2023-07-21
Westat, Inc. notified consumers of a data breach involving its third-party vendor, Progress MOVEit. A zero-day vulnerability allowed unauthorized copying of data from a MOVEit server between May 28-29, 2023. Impacted data included names, dates of birth, and Social Security numbers. Westat engaged forensic specialists, applied patches, and offered credit monitoring services.
- ⛰️New Hampshire State AGas victim2023-07-21
Westat, Inc. notified the New Hampshire AG of a data event involving the MOVEit Transfer tool. An unknown actor exploited a zero-day vulnerability to access the server between May 28-29, 2023, and exfiltrated HR files. Westat detected unusual activity on May 30, 2023. The breach affected 60 New Hampshire residents, exposing PII. Westat engaged forensic specialists, applied patches, and offered credit monitoring.
- 🦬Montana State AGas victim2023-07-21
Westat, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-07-21. The breach occurred from 5/28/2023 to 5/29/2023. 68 Montana residents were affected.
- 🦞Maine State AGas victim2023-07-21
Westat, Inc. experienced an external system breach on May 29, 2023, which was discovered on June 22, 2023. The breach compromised the names and Social Security numbers of 7,954 individuals, including 65 residents of Maine. Affected individuals were notified on July 21, 2023, and offered 12 months of credit monitoring and identity protection services through IDX.