Westat, Inc. notified the New Hampshire AG of a data event involving the MOVEit Transfer tool. An unknown actor exploited a zero-day vulnerability to access the server between May 28-29, 2023, and exfiltrated HR files. Westat detected unusual activity on May 30, 2023. The breach affected 60 New Hampshire residents, exposing PII. Westat engaged forensic specialists, applied patches, and offered credit monitoring.
Affected (this filing): 60