PH Tech is an Oregon-based business services company that works primarily with insurance companies throughout Oregon. The organization provides customer service, payment services, and enrollment help to many different corporations. There are over 211 employees at the company, which generates approximately $57 million in annual revenue, and many people were likely impacted by a recent data breach involving PH Tech.
The PH Tech breach occurred because the company relied on the MOVEit file transfer software tool. This software was known for securely moving files, but in May of 2023, a vulnerability in the software was exposed that allowed hackers to access all the files connected to the program. The C10P ransomware gang relied on this vulnerability to steal data from more than 150 separate companies. PH Tech was one of the companies impacted and nearly 2 million individuals may have lost data as a result.
The PH Tech breach is suspected to have occurred on May 30, 2023. We don't know the exact dates when the attack occurred, but on June 2, 2023, PH Tech was informed the vulnerability existed and that there was an issue to deal with. PH Tech hired a firm to investigate and got an official report back on June 16, 2023.
The PH Tech breach has the potential to impact 1.7 million customers enrolled in the Oregon Health Plan. All these individuals could have had any of the data points outlined above exposed to attackers.
We do not know how many PH Tech files were part of this data breach overall. We suspect the count was substantial, given how many people were impacted by the attack.