U.S. WELLNESS
ent_756ac4418af2029e86250989
Disclosures
6
State AG · HHS OCR · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
15,818
nationwide · HHS OCR MD
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- U.S. WELLNESS
- Normalized
- us wellness— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- uswellness.us
Disclosure history (6)newest first
- New Hampshire State AGas victim2023-04-26
US Wellness Inc. reported a data security incident involving a third-party vendor providing secure file transfer software. On January 31, 2023, the vendor experienced unauthorized access. US Wellness was notified on February 4, 2023. The incident potentially impacted personal information (names, addresses) on invoices for biometric screening services provided to WebMD/Volvo Group employees. 4 New Hampshire residents were affected. US Wellness engaged forensic experts, secured systems, and offered 24 months of credit monitoring.
- Massachusetts State AGas victim2023-03-22
US Wellness Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-22. 11 Massachusetts residents were affected. The report records the breach type as electronic.
- MARYLANDHHS OCRas victim2023-03-22
US Wellness Inc. (MD, Business Associate) reported to HHS on 2023-03-22 a Hacking/IT Incident affecting 15,818 individuals. The BA's third-party vendor was the victim of a cybersecurity attack that exposed PHI including names, addresses, and dates of birth. Breached information located on Network Server. The BA notified HHS, affected individuals, and the media, provided substitute notice on its website, and offered complimentary credit and identity protection services. Additional administrative, technical, and security safeguards were implemented.
- California State AGas victim2023-03-22
US Wellness Inc. notified the California Attorney General of a data security incident experienced by one of its vendors on January 31, 2023. The vendor discovered the incident the same day. The incident potentially impacted personal information including name, address, date of birth, member ID number, and service location details for individuals who received health screenings or flu shots from US Wellness, a vendor of Blue Cross Blue Shield of Arizona. US Wellness engaged forensic experts, secured systems, and offered 24 months of credit monitoring. No evidence of misuse was found.
- Montana State AGas victim2023-03-22
US Wellness, a vendor for Blue Cross Blue Shield of Arizona, notified Montana residents of a January 31, 2023 security incident involving a third-party vendor. The incident potentially exposed names, addresses, DOBs, member IDs, and service locations. US Wellness engaged forensic experts, secured systems, and offered 24 months of credit monitoring.
- New Hampshire State AGas victim2023-03-22
US Wellness Inc. notified the NH Attorney General of a data security incident experienced by its vendor on January 31, 2023. The incident disrupted access to certain systems. Personal information potentially impacted included name, address, date of birth, member ID number, and service location details. Four New Hampshire residents were affected. US Wellness engaged forensic experts, secured systems, and offered 24 months of credit monitoring via Experian.