norm: rightway healthcareUSno LEI · no CIKMax severity: Medium

Canonical registry

Rightway Healthcare

ent_91bb87deae874ff19be174f4

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Rightway Healthcare
Normalized: rightway healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

⛰️New Hampshire State AGas victim2023-11-14
Davis Polk & Wardwell LLP notified individuals of a security incident involving its third-party healthcare benefits provider, Rightway Healthcare. On September 23, 2023, Rightway determined unauthorized access occurred to a decommissioned legacy environment. The attacker exfiltrated HR files from 2019-2020 containing personal information of Davis Polk employees, partners, and dependents. Davis Polk engaged forensic review, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident involved identity data (SSNs, DOBs) but no PHI.