An unauthorized activity within one of the company’s email accounts breached certain patients' details of WellDyneRx, LLC.
The breached information included the names, dates of birth, Social Security numbers, driver’s license numbers, treatment information, health insurance information, contact information, prescription information, and other medical and healthcare-related information of 38,401 individuals.
WellDyneRx investigated the incident, and provided official notice of the breach to the U.S. Department of Health and Human Services Office for Civil Rights, and informed the impacted individuals of the breach.
Source: https://www.jdsupra.com/legalnews/welldynerx-llc-files-notice-of-data-1085442/
TPRM report: https://scoringcyber.rankiteo.com/company/welldynerx
"id": "wel133911722",
"linkid": "welldynerx",
"type": "Breach",
"date": "05/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 38401,
'industry': 'Healthcare',
'name': 'WellDyneRx, LLC',
'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 38401,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'dates of birth',
'Social Security numbers',
'driver’s license numbers',
'treatment information',
'health insurance information',
'contact information',
'prescription information',
'other medical and '
'healthcare-related '
'information']},
'description': 'An unauthorized activity within one of the company’s email '
"accounts breached certain patients' details of WellDyneRx, "
'LLC.',
'impact': {'data_compromised': ['names',
'dates of birth',
'Social Security numbers',
'driver’s license numbers',
'treatment information',
'health insurance information',
'contact information',
'prescription information',
'other medical and healthcare-related '
'information'],
'systems_affected': ['Email Accounts']},
'investigation_status': 'Completed',
'regulatory_compliance': {'regulatory_notifications': ['Provided official '
'notice of the breach '
'to the U.S. '
'Department of Health '
'and Human Services '
'Office for Civil '
'Rights']},
'response': {'communication_strategy': ['Informed impacted individuals of the '
'breach']},
'title': 'Unauthorized Email Account Activity at WellDyneRx, LLC',
'type': 'Data Breach'}