⛰️New Hampshire State AGFirst filing
Filed Nov 14, 2023bd_f61d60ea19fdbe7b
Davis Polk & Wardwell LLP notified individuals of a security incident involving its third-party healthcare benefits provider, Rightway Healthcare. On September 23, 2023, Rightway determined unauthorized access occurred to a decommissioned legacy environment. The attacker exfiltrated HR files from 2019-2020 containing personal information of Davis Polk employees, partners, and dependents. Davis Polk engaged forensic review, made regulatory notifications, and offered 24 months of credit monitoring via Experian. The incident involved identity data (SSNs, DOBs) but no PHI.