Welltok, a healthcare SaaS supplier, has alerted its clients that hackers breached MOVEit, the file switch program utilized by the corporate, which resulted in an information theft assault that uncovered the non-public knowledge of just about 8.5 million US sufferers.
Earlier this 12 months, the Clop ransomware gang took benefit of a zero-day vulnerability within the MOVEit software program to breach hundreds of organisations worldwide.They adopted up with extortion calls for and knowledge leaks that affected over 77 million people.
The corporate collaborates with healthcare service suppliers throughout the US, offering on-line wellness applications, holding databases with private affected person knowledge, producing predictive analytics, and supporting healthcare wants corresponding to medicine adherence and pandemic response.
The information breach occurred on July 26, 2023, as informed by the corporate. Because of this breach, affected person knowledge was uncovered, together with full names, e-mail addresses, bodily addresses, and phone numbers.
Initially, there have been various estimates on the variety of people affected by the Welltok knowledge breach as the corporate didn’t instantly disclose the knowledge. Nonetheless, the agency has now confirmed via the US Division of Well being and Human Providers breach portal that 8,493,379 folks have been impacted by the breach.
For some sufferers, the breach resulted within the publicity of delicate data corresponding to Social Safety Numbers (SSNs), Medicare/Medicaid ID numbers, and sure Well being Insurance coverage data.
The breach had an influence on establishments in a number of states, corresponding to Minnesota, Alabama, Kansas, North Carolina, Michigan, Nebraska, Illinois, and Massachusetts.
The next healthcare suppliers have been affected: Blue Cross and Blue Protect of Minnesota and Blue Plus, Blue Cross and Blue Protect of Alabama, Blue Cross and Blue Protect of Kansas, Blue Cross and Blue Protect of North Carolina, Corewell Well being, Religion Regional Well being Providers, Hospital & Medical Basis of Paris, Inc. dba Horizon Well being, Mass Basic Brigham Well being Plan, Precedence Well being, St. Bernards Healthcare, Sutter Well being, Trane Applied sciences Firm LLC, and group well being plans sponsored by Trane Applied sciences Firm LLC or Trane U.S. Inc., The group well being plans of Stanford Well being Care, of Stanford Well being Care, Lucile Packard Youngsters’s Hospital Stanford, Stanford Well being Care Tri-Valley, Stanford Medication Companions, and Packard Youngsters’s Well being Alliance, and The Guthrie Clinic.
Earlier this 12 months, the Clop ransomware gang took benefit of a zero-day vulnerability within the MOVEit software program to breach hundreds of organisations worldwide.They adopted up with extortion calls for and knowledge leaks that affected over 77 million people.
The corporate collaborates with healthcare service suppliers throughout the US, offering on-line wellness applications, holding databases with private affected person knowledge, producing predictive analytics, and supporting healthcare wants corresponding to medicine adherence and pandemic response.
The information breach occurred on July 26, 2023, as informed by the corporate. Because of this breach, affected person knowledge was uncovered, together with full names, e-mail addresses, bodily addresses, and phone numbers.
Initially, there have been various estimates on the variety of people affected by the Welltok knowledge breach as the corporate didn’t instantly disclose the knowledge. Nonetheless, the agency has now confirmed via the US Division of Well being and Human Providers breach portal that 8,493,379 folks have been impacted by the breach.
For some sufferers, the breach resulted within the publicity of delicate data corresponding to Social Safety Numbers (SSNs), Medicare/Medicaid ID numbers, and sure Well being Insurance coverage data.
The breach had an influence on establishments in a number of states, corresponding to Minnesota, Alabama, Kansas, North Carolina, Michigan, Nebraska, Illinois, and Massachusetts.
The next healthcare suppliers have been affected: Blue Cross and Blue Protect of Minnesota and Blue Plus, Blue Cross and Blue Protect of Alabama, Blue Cross and Blue Protect of Kansas, Blue Cross and Blue Protect of North Carolina, Corewell Well being, Religion Regional Well being Providers, Hospital & Medical Basis of Paris, Inc. dba Horizon Well being, Mass Basic Brigham Well being Plan, Precedence Well being, St. Bernards Healthcare, Sutter Well being, Trane Applied sciences Firm LLC, and group well being plans sponsored by Trane Applied sciences Firm LLC or Trane U.S. Inc., The group well being plans of Stanford Well being Care, of Stanford Well being Care, Lucile Packard Youngsters’s Hospital Stanford, Stanford Well being Care Tri-Valley, Stanford Medication Companions, and Packard Youngsters’s Well being Alliance, and The Guthrie Clinic.
