Vitality Group International, Inc.

Vitality: Engagement Platform That Works - Wellness Solutions

Vitality Group International, Inc. experienced a data breach on May 30, 2023, due to a security vulnerability in the third-party MOVEit file transfer program. An unauthorized third party accessed the Vitality server for approximately two hours. The incident potentially exposed names, mailing addresses, dates of birth, email addresses, and Social Security numbers of U.S.-based employees of Brookfield and their partners/spouses. Vitality identified the risk on June 1, 2023, disconnected the server, and initiated forensic investigations. Affected individuals are offered 24 months of credit monitoring via Experian.

Vitality Group notified consumers of a data breach stemming from a zero-day vulnerability in Progress Software's MOVEit Transfer application. The attack, identified on May 30, 2023, compromised personal information including names, SSNs, and addresses of employees of partner companies Ambry Genetics and REALM IDx. Vitality disabled access, conducted forensic investigations, patched systems, and offered two years of Experian IdentityWorks monitoring.

Vitality Group International Inc notified consumers of a data breach involving its MOVEit file transfer software. An unauthorized third party exploited a zero-day vulnerability to exfiltrate files containing names, dates of birth, and limited health information (cholesterol, glucose, blood pressure, A1c). The incident occurred on May 30, 2023. Vitality contained the breach and offered 24 months of Experian credit monitoring.

Vitality Group International, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-06-26. The breach occurred on 5/30/2023. 2 Montana residents were affected.

vitalitygroup.com