Welltok, Inc. notified Cohere Health customers of a data breach involving the MOVEit Transfer server. An unknown actor exploited a vulnerability in the software on May 30, 2023, accessing and exfiltrating data including names, DOB, SSNs, and PHI. Welltok discovered the compromise on July 26, 2023, after applying patches. Approximately 1,345 Rhode Island residents were identified as affected. Welltok engaged third-party cybersecurity specialists, reconstructed systems, and offered credit monitoring and identity restoration services.
Affected (this filing): 1,345