norm: cvsno LEI · no CIKMax severity: High

Canonical registry

CVS

ent_6a8f5fe5c71518a3859209ff

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

4,479

as filed · State AG WA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: CVS
Normalized: cvs— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

Washington State AGas victim2024-04-16
Welltok, Inc. reported a supplemental data event for the Blue Cross Blue Shield Federal Employee Program. An unknown actor exploited vulnerabilities in the MOVEit Transfer server on May 30, 2023, exfiltrating names, DOBs, and Medicare IDs. Welltok was alerted on July 26, 2023. Notices were sent to 4,479 Washington residents starting Jan 23, 2024. Credit monitoring via Experian was offered.