Welltok, Inc. - Filing on behalf of multiple entities; please see Exhibit 1.

Organization

Welltok, Inc. - Filing on behalf of multiple entities; please see Exhibit 1.

Source

California AG · source record

Date reported

Dec 22, 2023

Date(s) of breach

Tuesday, May 30, 2023

Residents affected

Not published by this source

Data exposed

Social Security number Financial / bank account Health insurance Date of birth Phone number Postal address Name

Notice letter

Sample notice (PDF)

Discovered

May 31, 2023, as stated in the letter

"On May 31, 2023, Progress Software announced it discovered a previously unknown (“zero- day”) vulnerability in the MOVEit transfer tool software that could allow an unauthorized party to access files."

Days to notice

205 days from discovery (May 31, 2023) to the California record (Dec 22, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

24 months of credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 15:42 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.