Rightway
ent_63d2a808a5eb75fbdf2f9b0d
Disclosures
2
State AG · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
16
as filed · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Rightway
- Normalized
- rightway— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- rightwayhealthcare.com
Disclosure history (2)newest first
- ⛰️New Hampshire State AGas victim2023-11-01
Okta, Inc. notified the New Hampshire Attorney General of a data security incident involving its third-party vendor, Rightway Healthcare, Inc. A targeted SIM swap attack on a Rightway employee on September 23, 2023, led to unauthorized access to an eligibility census file. The incident impacted 16 New Hampshire residents, exposing personal information. Okta discovered the breach on October 5, 2023, and began notifying affected individuals on November 2, 2023, offering 24 months of credit monitoring and identity restoration services through Experian.
- 🍁Vermont State AGas victim2013-11-13
Davis Polk & Wardwell LLP notified consumers of a data breach involving its third-party vendor, Rightway Healthcare. Unauthorized access occurred on September 23, 2023, affecting personal information including names, SSNs, and DOBs of Davis Polk personnel and eligible dependents. Rightway is a healthcare benefits provider. Davis Polk engaged the vendor, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident status is contained.