DAVIS POLK & WARDWELL LLP

Davis Polk & Wardwell LLP notified individuals of a security incident involving its third-party healthcare benefits provider, Rightway Healthcare. On September 23, 2023, Rightway determined unauthorized access occurred to a decommissioned legacy environment. The attacker exfiltrated HR files from 2019-2020 containing personal information of Davis Polk employees, partners, and dependents. Davis Polk engaged forensic review, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident involved identity data (SSNs, DOBs) but no PHI.

A third-party vendor for the law firm Davis Polk & Wardwell LLP experienced a data breach, which was discovered on October 19, 2023. The breach occurred on September 21, 2023, and affected one resident of Maine. The compromised information included names and Social Security numbers. The firm provided 24 months of triple-bureau credit monitoring through Experian.

Davis Polk & Wardwell LLP notified consumers of a data breach involving its third-party vendor, Rightway Healthcare. Unauthorized access occurred on September 23, 2023, affecting personal information including names, SSNs, and DOBs of Davis Polk personnel and eligible dependents. Rightway is a healthcare benefits provider. Davis Polk engaged the vendor, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident status is contained.