Welltok’s MOVEit Breach Returns, Another 426k Records Exposed

  • By Steven
  • Nov 27, 2023

Welltok's MOVEit Breach Returns

Welltok operates an online wellness program various organizations use to encourage healthy lifestyles. They’ve been in our news frequently as the global MOVEit breach continues. Around nine million people have had their information exposed resulting from Welltok’s breach in the last few weeks; this week, Welltok’s breach returns with a double threat target—Premier Health and Graphic Packaging International. 

How Did the Attack Occur? 

The global MOVEit breach was made possible by a zero-day vulnerability, allowing access to the internal data of many organizations. MOVEit’s many features make it a widely chosen file management option across industries, including healthcare and servicing organizations. Welltok presumably used MOVEit to manage and maintain member data, facilitating their brand ideals. Premier Health and Graphic Packaging International used Welltok’s services, resulting in assailants breaching their member group information. 

What Information Was Viewed or Stolen? 

The stolen information differs between individuals and their respective available data. Both organizations suggest that the attackers may have accessed the following credentials: names, birthdays, Social Security Numbers, prescription and provider details, and health insurance plan numbers. Regarding Graphic Packaging International, the taken information may include provider information; conversely, Premier Health may include patient data or group identification numbers. We recommend all those with associations take preventative actions to mitigate the risk of data misuse. 

How Did Welltok Admit to the Breach? 

There are two timelines for this data breach. Both organizations started their timeline on May 31st, 2023; this was the day Progress Software publicly announced the MOVEit zero-day vulnerability. Immediately, organizations using the software began internal investigations, including Welltok. Graphic Packaging International received a potential breach notice in late August, while Premier Health obtained theirs almost a month later. 

The breach filing on the Maine Attorney General’s website states officials found the breaches in late October; however, the published consumer notices suggest the discovery of both incidents happened within a week. Impacted consumers should expect a breach notice in the mail, as officials sent notifications around November 22nd. 

What Will Become of the Stolen Information? 

According to the filing on Maine’s website, the assailants accessed an estimated 426,812 records in the breach. How the assailants will use the data in the future is a more challenging question. There are no indications of who the assailants were or their plans. The cybercriminals were likely not involved with the ransomware gang CL0P; they have claimed responsibility for significant data losses from the MOVEit event. Regardless of who committed the breach or why, affected parties must act to protect themselves. 

What Should Affected Parties Do in the Aftermath of the Breach? 

The hackers could use the stolen data in this breach in many ways. The assailants could ransom the data back to Welltok, although, at this stage, it is unlikely. They could alternatively sell the credentials online to other actors looking to turn a profit through fraud and impersonation plots. Otherwise, they might keep the data for themselves. Those who find suspicious activity within their account must act immediately to contain the threat; for everyone else, only preventative measures like account monitoring and multi-factor authentications can mitigate data misuse.

About the Author
IDStrong Logo

Related Articles

Instagram Vulnerability Allowed Hackers Access to Control Your Phone

Security experts Check Point Research discovered a critical vulnerability while examining Instagra ... Read More

Alien Malware Infects More than 226 Mobile Apps and Steals Bank Data

As reported on September 24, 2020, by ZDNet and ThreatPost, a new strain of malware named “A ... Read More

Universal Health Systems Hit by Ransomware Attack

Universal Health Systems (UHS), a Fortune 500 company owning more than 400 hospitals across the co ... Read More

Exchange Server Bug Exposes a Big Risk to Hackers

Months after Microsoft released a patch to fix a serious flaw in MS Exchange Server, more than 61% ... Read More

Clients’ Bank Data Exposed in Blackbaud Ransomware Attack

Blackbaud software was victim to a ransomware attack last May, and new information suggests that c ... Read More

Latest Articles

Cementitious Vendor—CGM—Network Compromised by 315k Data Breach

Cementitious Vendor—CGM—Network Compromised by 315k Data Breach

Based in Philadelphia, Pennsylvania, CGM is a nationwide cementitious vendor for industries and construction projects. They are a leader in manufacturing, labeling, and distributing custom cement and patching products.

Chattanooga Heart Institute Updates on 2023 Network Cyber Attack

Chattanooga Heart Institute Updates on 2023 Network Cyber Attack

Patients with cardiovascular issues may appear in one of the Chattanooga Heart Institute (CHI) facilities in Tennessee and Georgia.

Oklahoma’s Largest Non-Profit Health System Breached; 2.3 Million Exposures

Oklahoma’s Largest Non-Profit Health System Breached; 2.3 Million Exposures

INTEGRIS Health is the largest non-profit healthcare network in Oklahoma and surrounding regions. The network includes medical and surgical centers, hospitals, emergency rooms, hospice options, addiction recovery programs, and a holistic approach to health and wellness.

Featured Articles

How to Buy a House with Bad Credit

How to Buy a House with Bad Credit

Buying your own home is the American Dream, but it might seem out of reach to those with bad credit. However, the good news is, if your credit is less than perfect, you do still have options and in most cases, can still buy a home.

How Secure Is Your Password? Tips to Improve Your Password Security

How Secure Is Your Password? Tips to Improve Your Password Security

Any good IT article on computers and network security will address the importance of strong, secure passwords. However, the challenge of good passwords is that most people have a hard time remembering them, so they use simple or obvious ones that pose a security risk.

Top 10 Senior Scams and How to Prevent Them

Top 10 Senior Scams and How to Prevent Them

Senior scams are becoming a major epidemic for two reasons. First, seniors often have a lot of money in the bank from a life of working hard and saving.

Free Identity Exposure Scan
Instantly and Securely Check if Your Personal Information is Exposed on the Dark Web or Sold by Data Brokers
Please enter first name
Please enter last name
Please select a state
Close
Free Identity Threat Scan
Instantly Check if Your Personal Information is Exposed
All fields below are required
Please enter first name
Please enter last name
Please enter a city
Please select a state
Please enter an age
Please enter an email address
Close