Insightin Health

Insightin Health, Inc. disclosed a cybersecurity incident involving the GoAnywhere file-transfer tool. An unauthorized party exploited an unknown design flaw to access files between September 17 and 23, 2025. The breach exposed names, provider names, insurance info, and member IDs of approximately 1,641 Rhode Island residents. Insightin secured the environment, engaged experts, and offered 12 months of credit monitoring.

Affected (this filing): 1,641

Insightin Health, Inc. notified the Vermont Attorney General of a data breach affecting 11,496 Vermont residents. The incident involved unauthorized access to Insightin's network via a zero-day vulnerability in GoAnywhere software between September 17-23, 2025. Affected data included names, dates of birth, gender, and health plan information. Insightin engaged law enforcement, provided 12 months of credit monitoring through TransUnion, and implemented additional security safeguards.

Affected (this filing): 11,496