DAVIS POLK & WARDWELL LLP

Davis Polk & Wardwell LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-14. 12 Massachusetts residents were affected. The report records the breach type as electronic.

Davis Polk & Wardwell LLP notified individuals of a security incident at its healthcare benefits provider, Rightway Healthcare. On September 23, 2023, Rightway determined that unauthorized access occurred in a decommissioned legacy environment containing HR files from 2019-2020. Efforts were made to exfiltrate data including names, SSNs, and employment info of employees, partners, and dependents. No PHI was involved. Davis Polk engaged Rightway to assess scope and is offering 24 months of credit monitoring.

A third-party vendor for the law firm Davis Polk & Wardwell LLP experienced a data breach, which was discovered on October 19, 2023. The breach occurred on September 21, 2023, and affected one resident of Maine. The compromised information included names and Social Security numbers. The firm provided 24 months of triple-bureau credit monitoring through Experian.

Davis Polk & Wardwell LLP notified consumers of a data breach involving its third-party vendor, Rightway Healthcare. Unauthorized access occurred on September 23, 2023, affecting personal information including names, SSNs, and DOBs of Davis Polk personnel and eligible dependents. Rightway is a healthcare benefits provider. Davis Polk engaged the vendor, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident status is contained.