Welltok

Welltok, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-13. The breach occurred on 5/30/2023. 34,088 Montana residents were affected.

Affected (this filing): 34,088

Welltok, Inc reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-17. The breach occurred on 5/30/2023. 14 Montana residents were affected.

Affected (this filing): 14

Welltok, Inc. disclosed that an unknown actor exploited software vulnerabilities in its MOVEit Transfer server on May 30, 2023, exfiltrating data including names, member IDs, dates of birth, addresses, phone numbers, and medication information. The company was alerted to the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. Affected individuals include customers of Prime Therapeutics and Stanford Health Care. Welltok is offering credit monitoring and identity restoration services.

Welltok, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-11-18. The breach occurred during 5/30/2023 - 5/31/2023. The breach was discovered on 10/13/2023. 1,648,848 individuals were affected. Notice was sent on 11/18/2023.

Affected (this filing): 1,648,848

Welltok, Inc. notified New Hampshire residents that an unknown actor exploited vulnerabilities in the MOVEit Transfer server on May 30, 2023, to exfiltrate data. Welltok discovered the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. Approximately 363 New Hampshire residents were affected. Welltok engaged third-party cybersecurity specialists, offered credit monitoring via Experian, and enhanced privacy policies.

Affected (this filing): 363

Healthcare business associate Welltok, Inc. reported a data breach affecting 426,812 individuals, stemming from the MOVEit vulnerability. The incident occurred on May 30, 2023, and was discovered on October 23, 2023. Compromised data includes names and Social Security Numbers. Welltok notified affected individuals on November 22, 2023, and is offering 12 to 24 months of credit monitoring and identity restoration services through Experian.

Affected (this filing): 426,812

Welltok, Inc., a business associate for multiple healthcare entities, reported an external system breach that occurred on May 30, 2023. The breach, discovered on September 22, 2023, impacted 53 Maine residents. The compromised information includes names and Social Security numbers. In response, Welltok offered 24 months of credit monitoring and identity restoration services through Experian.

Affected (this filing): 53

Welltok, Inc. notified New Hampshire residents of a breach involving its MOVEit Transfer server. An unknown actor exploited software vulnerabilities to access the server on May 30, 2023, and exfiltrated data. Welltok discovered the incident on August 11, 2023, and sent notifications to approximately 116 NH residents on December 4, 2023. Impacted data included names, addresses, SSNs, DOBs, and health information. Welltok engaged third-party cybersecurity specialists and offered credit monitoring via Experian.

Affected (this filing): 116

Welltok, Inc. filed a state AG breach notice for an external system breach (hacking) occurring on 05/30/2023 and discovered on 09/22/2023. The incident affected 495,331 individuals, including 26 Maine residents. Acquired data included names and Social Security Numbers. Welltok provided written notification and offered 12-24 months of credit monitoring and identity theft protection.

Affected (this filing): 495,331

Welltok, Inc. disclosed a breach of its MOVEit Transfer server exploited via software vulnerabilities. An unknown actor accessed the server on May 30, 2023, and exfiltrated data including names, dates of birth, insurance IDs, and health information. Welltok notified affected individuals in December 2023, offering credit monitoring and identity restoration services.

Welltok, Inc. disclosed that an unknown actor exploited software vulnerabilities in its MOVEit Transfer server on May 30, 2023, exfiltrating data including names, dates of birth, phone numbers, treatment/diagnosis information, prescription information, provider names, medical record numbers, and health insurance information. The company was alerted to the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. Welltok engaged third-party cybersecurity specialists, reconstructed systems, and is offering 12 months of credit monitoring via Experian to affected individuals. The incident impacts residents of California and Rhode Island, among others.

Welltok, Inc. issued a supplemental notice to New Hampshire residents regarding a cybersecurity incident involving the MOVEit Transfer server. An unknown actor exploited software vulnerabilities to access the server on May 30, 2023, and exfiltrated data. Welltok discovered the compromise on August 11, 2023, and notified affected individuals on December 13, 2023. Approximately 21 New Hampshire residents were impacted. The incident involved personal and government-issued identification data. Welltok engaged third-party cybersecurity specialists and provided credit monitoring services through Experian.

Affected (this filing): 21

Welltok, Inc., a business associate, reported an external system breach that occurred on May 30, 2023, and was discovered on September 22, 2023. The breach compromised the names and Social Security Numbers of 396 Maine residents. Notifications to affected individuals began on November 13, 2023.

Affected (this filing): 396

Welltok, Inc. disclosed that an unknown actor exploited a zero-day vulnerability in Progress Software's MOVEit Transfer tool between May 30-31, 2023, exfiltrating data including names, addresses, phone numbers, Member IDs, DOB/Age, Medicaid IDs, and plan types. Welltok learned of the potential impact on July 26, 2023, and confirmed the breach on August 11, 2023. The company engaged third-party cybersecurity specialists and is offering 24 months of credit monitoring via Experian.

Welltok, Inc. notified consumers of a data breach involving its MOVEit Transfer server, a third-party tool used to manage data for OSF Healthcare. An unknown actor exploited software vulnerabilities to access the server on May 30, 2023, and exfiltrated personal information, including names. Welltok engaged third-party cybersecurity specialists and is offering credit monitoring services to affected individuals.

Welltok, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a breach of its MOVEit Transfer server. An unknown actor exploited software vulnerabilities to access the server on May 30, 2023, and exfiltrated data. Welltok detected the compromise on July 26, 2023, and confirmed the breach on August 11, 2023. The incident affected approximately 642 New Hampshire residents, whose personal information (including names, addresses, and potentially government IDs) was exposed. Welltok engaged third-party cybersecurity specialists, offered credit monitoring via Experian, and is reviewing its privacy policies.

Affected (this filing): 642