GRAPHIC PACKAGING INTERNATIONAL, LLC

Welltok, Inc. notified Graphic Packaging International that an unknown actor exploited vulnerabilities in the MOVEit Transfer server on May 30, 2023, to exfiltrate data including names and government IDs. The incident was discovered on July 26, 2023, and notifications were sent in November 2023. Welltok engaged third-party cybersecurity specialists and is offering credit monitoring services.

Welltok, Inc., a wellness program provider for Graphic Packaging International, disclosed that an unknown actor exploited software vulnerabilities in its MOVEit Transfer server on May 30, 2023, exfiltrating data including names and other personal information. The incident was discovered on July 26, 2023. Welltok engaged third-party cybersecurity specialists, reconstructed systems, and is offering credit monitoring to affected individuals. The breach affects residents of California and Rhode Island, among others.