AltaMed Health Services Corporation

AltaMed Health Services Corporation notified the California AG of a data breach involving its third-party vendor, Vitality Group. The incident stemmed from a vulnerability in the MOVEit file transfer program exploited on May 30, 2023. Vitality identified the risk on June 1, 2023, and disconnected the server. Affected data included names, addresses, dates of birth, email addresses, and Social Security numbers. AltaMed is offering two years of credit monitoring to affected members.

AltaMed Health Services reported a data breach involving a third-party software vulnerability in Progress Software's MOVEit Transfer. An unauthorized third party accessed a server on May 29-30, 2023, and downloaded data including names, Social Security numbers, dates of birth, addresses, and gender. The vulnerability was disclosed by Progress on May 31, 2023. AltaMed patched servers, investigated the incident, and is offering 24 months of identity monitoring through Kroll to affected individuals.