Cohere Health

Welltok, Inc. issued a supplemental notice to the Washington AG regarding a MOVEit Transfer server compromise. An unknown actor exploited vulnerabilities to access the server on May 30, 2023, and exfiltrated PHI and PII. Welltok detected the issue on July 26, 2023, and confirmed the breach on August 11, 2023. Notices were sent to affected individuals starting December 13, 2023.

Welltok, Inc. notified Cohere Health customers of a data breach involving the MOVEit Transfer server. An unknown actor exploited a vulnerability in the software on May 30, 2023, accessing and exfiltrating data including names, DOB, SSNs, and PHI. Welltok discovered the compromise on July 26, 2023, after applying patches. Approximately 1,345 Rhode Island residents were identified as affected. Welltok engaged third-party cybersecurity specialists, reconstructed systems, and offered credit monitoring and identity restoration services.

Cohere Health reported a data breach to the Delaware Attorney General. The breach occurred on 2023-05-30. Notice was filed on 2023-09-22. 541 Delaware residents were affected.

Cohere Health, Inc. notified the New Hampshire Attorney General on August 11, 2023, of a misconfiguration incident where two files containing personal information of Humana insureds were inadvertently set for public access on its cloud provider's platform. Cohere Health became aware of the issue on June 15, 2023. The files were accessible from July 2021 until discovery. One New Hampshire resident was affected. Cohere Health secured the files, launched an investigation, and is offering credit monitoring services.

Cohere Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-11. 1 Massachusetts residents were affected. The report records the breach type as electronic.