PH Tech Data Breach
Date: May, 2023PH Tech is an Oregon-based business services company that works primarily with insurance companies throughout Oregon. The organization provides customer service, payment services, and enrollment help to many different corporations. There are over 211 employees at the company, which generates approximately $57 million in annual revenue, and many people were likely impacted by a recent data breach involving PH Tech.
What Was the Breach?
- Social Security Numbers
- Full Names
- Birth Dates
- Home Addresses
- Member ID Numbers
- Authorization Data
- Insurance Diagnosis Codes
- Claim Information
How Did the Breach Occur?
The PH Tech breach occurred because the company relied on the MOVEit file transfer software tool. This software was known for securely moving files, but in May of 2023, a vulnerability in the software was exposed that allowed hackers to access all the files connected to the program. The C10P ransomware gang relied on this vulnerability to steal data from more than 150 separate companies. PH Tech was one of the companies impacted and nearly 2 million individuals may have lost data as a result.
When Did This Breach Occur?
The PH Tech breach is suspected to have occurred on May 30, 2023. We don't know the exact dates when the attack occurred, but on June 2, 2023, PH Tech was informed the vulnerability existed and that there was an issue to deal with. PH Tech hired a firm to investigate and got an official report back on June 16, 2023.
Who Does the Breach Impact?
The PH Tech breach has the potential to impact 1.7 million customers enrolled in the Oregon Health Plan. All these individuals could have had any of the data points outlined above exposed to attackers.
How Many Files Does the Breach Affect?
We do not know how many PH Tech files were part of this data breach overall. We suspect the count was substantial, given how many people were impacted by the attack.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...