Westat, Inc.

Westat, Inc. reported to HHS on 2023-11-03 a Hacking/IT Incident affecting 20045 individuals. Breached information located on Network Server. A software application used by a business associate exposed PHI including names, addresses, DOB, claims, diagnoses, and treatment info. BA provided credit monitoring and enhanced safeguards.

Westat, Inc. notified South Carolina residents of a data incident involving the MOVEit Transfer tool. Unauthorized access occurred May 28-29, 2023, resulting in the exfiltration of personal information including names and health-related data elements from DAWN surveillance files. Westat engaged forensic specialists, applied security patches, and offered 12 months of credit monitoring. No evidence of identity theft was found.

Westat, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-28 and was reported on 2023-10-13. 32 Indiana residents were affected. 261 individuals affected in total.

Westat, Inc. reported to HHS on 2023-10-13 a Hacking/IT Incident affecting 51,513 individuals. A software application used by its business associate exposed PHI including names, addresses, dates of birth, claims information, diagnoses/conditions, and treatment information. Breached information located on a Network Server. The BA notified HHS and affected individuals, provided substitute notice, and offered complimentary credit monitoring services.

Westat, Inc. notified consumers of a data breach involving its third-party vendor, Progress MOVEit. A zero-day vulnerability allowed unauthorized copying of data from a MOVEit server between May 28-29, 2023. Impacted data included names, dates of birth, and Social Security numbers. Westat engaged forensic specialists, applied patches, and offered credit monitoring services.

Westat, Inc. notified the New Hampshire AG of a data event involving the MOVEit Transfer tool. An unknown actor exploited a zero-day vulnerability to access the server between May 28-29, 2023, and exfiltrated HR files. Westat detected unusual activity on May 30, 2023. The breach affected 60 New Hampshire residents, exposing PII. Westat engaged forensic specialists, applied patches, and offered credit monitoring.

Westat, Inc. notified Montana residents of a data breach involving third-party vendor MOVEit. A zero-day vulnerability allowed unauthorized copying of data between May 28-29, 2023. Impacted data included names, dates of birth, and Social Security numbers. Westat engaged forensic specialists, applied patches, and offered credit monitoring.

Westat, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-28 and was reported on 2023-07-21. 91 Indiana residents were affected. 7,954 individuals affected in total.

Westat, Inc. experienced an external system breach on May 29, 2023, which was discovered on June 22, 2023. The breach compromised the names and Social Security numbers of 7,954 individuals, including 65 residents of Maine. Affected individuals were notified on July 21, 2023, and offered 12 months of credit monitoring and identity protection services through IDX.

Westat, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-21. 130 Massachusetts residents were affected. The report records the breach type as electronic.

Homepage - Westat

westat.com