Welltok, Inc. - Filing on behalf of multiple entities; please see Exhibit 1.

Organization

Welltok, Inc. - Filing on behalf of multiple entities; please see Exhibit 1.

Source

California AG · source record

Date reported

Dec 15, 2023

Date(s) of breach

Tuesday, May 30, 2023

Residents affected

Not published by this source

Data exposed

Medical / health information Health insurance Date of birth Phone number Name

Notice letter

Sample notice (PDF)

Discovered

Aug 11, 2023, as stated in the letter

"After a full reconstruction of our systems and historical data, our investigation determined on August 11, 2023 that an unknown actor exploited software vulnerabilities, accessed the MOVEit Transfer server on May 30, 2023, and exfiltrate..."

Days to notice

126 days from discovery (Aug 11, 2023) to the California record (Dec 15, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 15:55 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.