Privacy Unpacked

Incident · one vendor, 11 organisations

The Welltok breach

17 November 2023 to 19 April 2024

11 organisations on the tracker had data taken through Welltok, which reported its own breach on 17 November 2023. Each one is listed with the words of the source that names Welltok.

The vendor

  1. WelltokUSUnited States · 17 November 2023 1.6MOregon residents

Organisations affected through Welltok

  1. Graphic Packaging International (Welltok, Inc.)USUnited States · 22 November 2023 554Washington residents

    Graphic Packaging International (Welltok, Inc.) Washington Attorney General

  2. Elixir RX Solutions (Welltok)USUnited States · 5 December 2023 544Washington residents

    Elixir RX Solutions (Welltok) Washington Attorney General

  3. Cohere Health (Welltok, Inc.)USUnited States · 15 December 2023 2.3KWashington residents

    Cohere Health (Welltok, Inc.) Washington Attorney General

  4. Reyes Holdings, LLC (Welltok, Inc.)USUnited States · 15 December 2023 543Washington residents

    Reyes Holdings, LLC (Welltok, Inc.) Washington Attorney General

  5. Centerwell Pharmacy (Welltok, Inc.)USUnited States · 15 December 2023 12.2KWashington residents

    Centerwell Pharmacy (Welltok, Inc.) Washington Attorney General

  6. United Healthcare Services, Inc. (Welltok)USUnited States · 22 December 2023 9.9KWashington residents

    United Healthcare Services, Inc. (Welltok) Washington Attorney General

  7. Highmark Blue Cross Blue Shield (Welltok)USUnited States · 8 January 2024 504Washington residents

    Highmark Blue Cross Blue Shield (Welltok) Washington Attorney General

  8. Aetna ACE (Welltok, Inc.)USUnited States · 28 February 2024 2.7KWashington residents

    Aetna ACE (Welltok, Inc.) Washington Attorney General

  9. CVS, the Blue Cross Blue Shield Federal Employee Program (Welltok, Inc.)USUnited States · 16 April 2024 4.5KWashington residents

    CVS, the Blue Cross Blue Shield Federal Employee Program (Welltok, Inc.) Washington Attorney General

  10. Premera Blue Cross (Welltok, Inc.)USUnited States · 19 April 2024 2.4KWashington residents

    Premera Blue Cross (Welltok, Inc.) Washington Attorney General

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Welltok as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.