On November 9, 2022, Work Health Solutions reported a data breach with the Attorney General of California after an unauthorized party was able to access an employee’s email account that contained sensitive information related to certain individuals. According to WHS, the breach resulted in the full names, Social Security numbers, driver’s license numbers, health insurance information, and medical information being compromised. Recently, WHS sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.
Given the nature of Work Health Solutions’ business, there is a good chance that many of those who were impacted by the recent data breach had no idea that the company existed, let alone possessed their personal information. However, as we’ve discussed in previous posts, this type of data breach—which appears to be a third-party data breach—is quite common. In fact, a recent study found that approximately 60 percent of all data breaches involve hackers targeting a third party.
What We Know About the Recent Work Health Solutions Data Breach
The available information regarding the Work Health Solutions breach comes from the company’s filing with the California Attorney General’s Data Security Breaches web page as well as notice posted on the WHS website. According to these sources, Work health Solutions recently learned that an unauthorized party had access to a single employee’s email account. While the company did not elaborate on how it came to this realization, in response to its discovery, WHS launched an internal investigation with the assistance of third-party data security experts.
The company’s investigation confirmed that an unauthorized party gained access to the employee’s email account on February 16, 2022. The period of unauthorized access lasted until March 24, 2022. Through its investigation, Work Health Solutions was also able to determine that some of the files accessible through the compromised email account contained sensitive information belonging to certain individuals.
Upon discovering that sensitive consumer data was made available to an unauthorized party, Work Health Solutions began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your full name, Social Security number, driver’s license number, health insurance information, and medical information.
On November 9, 2022, Work Health Solutions sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About Work Health Solutions
Work Health Solutions is a medical services company based in San Jose, California. The company provides occupational health programs for large-scale employers designed to fit their unique needs. Work Health Solutions also provides onsite medical surveillance testing and occupational medical exams and offers wellness clinics, primary care, preventative programs and occupational health services. Work Health Solutions employs more than 100 people and generates between $5 and $25 million in annual revenue.
