Davis Polk & Wardwell LLP notified consumers of a data breach involving its third-party vendor, Rightway Healthcare. Unauthorized access occurred on September 23, 2023, affecting personal information including names, SSNs, and DOBs of Davis Polk personnel and eligible dependents. Rightway is a healthcare benefits provider. Davis Polk engaged the vendor, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident status is contained.