Welcome Health, based in Whittier, California, recently disclosed a data breach involving sensitive personal and medical information. The breach was discovered on July 8, 2024, when suspicious activity was detected within its email system. An investigation revealed that unauthorized access occurred between June 11 and July 8, 2024, potentially compromising data such as Social Security numbers, health plan member numbers, and diagnosis and treatment details. Welcome Health promptly reviewed the affected data to determine the scope of the incident and identify impacted individuals.
By August 12, 2024, the company completed its data review, confirming that the breached information varied by individual but included a combination of personal identifiers and medical records. In response, Welcome Health took immediate steps to notify those affected and ensure they were informed about the potential risks. The organization also posted a public notice on its website to reach any individuals for whom direct contact information was unavailable.
On September 6, 2024, Welcome Health began mailing notification letters to impacted individuals, detailing the specific types of data involved and offering resources to mitigate potential harm. To support affected parties, the company is providing 24 months of complimentary identity monitoring services. These services aim to help individuals detect and address identity theft or misuse of their personal information.
Welcome Health, founded in 2021, specializes in senior care, including preventive health measures and chronic disease management. Its services emphasize improving the quality of life for seniors through home visits and diagnostic testing. Following the breach, the company has reiterated its commitment to protecting personal information and strengthening its security measures to prevent future incidents.
Reference: