US Wellness was the victim of a ransomware attack that may have involved protected health information belonging to members of its wellness clients.
The compromised information includes name, address, date of birth, member ID number and/or Social Security number.
US Wellness took immediate steps to secure its systems and promptly launched an investigation.
US Wellness sent notification letters to the individuals whose personal and/or protected health information was potentially involved in this incident, providing them with information about what happened and steps they can take to protect their information.
Source: https://www.securitymagazine.com/articles/99278-us-wellness-confirms-data-security-incident
TPRM report: https://scoringcyber.rankiteo.com/company/us-wellness
"id": "usw43110723",
"linkid": "us-wellness",
"type": "Ransomware",
"date": "05/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Health and Wellness',
'name': 'US Wellness',
'type': 'Company'}],
'customer_advisories': ['Provided information about what happened and steps '
'to protect their information'],
'data_breach': {'personally_identifiable_information': ['name',
'address',
'date of birth',
'member ID number',
'Social Security '
'number'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Protected Health Information']},
'description': 'US Wellness was the victim of a ransomware attack that may '
'have involved protected health information belonging to '
'members of its wellness clients. The compromised information '
'includes name, address, date of birth, member ID number '
'and/or Social Security number. US Wellness took immediate '
'steps to secure its systems and promptly launched an '
'investigation. US Wellness sent notification letters to the '
'individuals whose personal and/or protected health '
'information was potentially involved in this incident, '
'providing them with information about what happened and steps '
'they can take to protect their information.',
'impact': {'data_compromised': ['name',
'address',
'date of birth',
'member ID number',
'Social Security number']},
'investigation_status': 'In Progress',
'response': {'communication_strategy': ['Sent notification letters to '
'affected individuals'],
'containment_measures': ['Secured its systems',
'Launched an investigation']},
'title': 'Ransomware Attack on US Wellness',
'type': 'Ransomware Attack'}