Welltok hack exposed the personal data of around 8.5 million patients in the US

Welltok, a healthcare SaaS provider, has alerted its customers that hackers breached MOVEit, the file transfer program used by the company, which resulted in a data theft attack that exposed the personal data of almost 8.5 million US patients.

Earlier this year, the Clop ransomware gang took advantage of a zero-day vulnerability in the MOVEit software to breach thousands of organisations worldwide. They followed up with extortion demands and data leaks that affected over 77 million individuals.

The company collaborates with healthcare service providers across the United States, providing online wellness programs, holding databases with personal patient data, generating predictive analytics, and supporting healthcare needs such as medication adherence and pandemic response.