Welltok Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Welltok, Inc. regarding its recent data breach. The Welltok data breach involved sensitive personal identifiable information and protected health information belonging to an undetermined number of individuals.


Welltok is a data-driven, enterprise SaaS company based in Colorado. Founded in 2009, Welltok provides solutions built on a single, secure platform that includes a large consumer database, machine learning and multi-channel engagement that drives and accounts for targeted actions, helping companies better target and interact with their consumer populations. Headquartered in Denver, Colorado, Welltok four additional locations in California, Georgia, New Jersey, and Massachusetts, and employs more than 200 individuals.


On July 26, 2023, Welltok discovered that it had experienced a data breach in which personal identifiable information and protected health information may have been accessed and acquired. Through its investigation, Welltok determined that an unauthorized actor may have accessed this sensitive information through a vulnerability in the MOVEit file sharing platform, which Welltok utilized, on May 30, 2023. On October 24, 2023, Welltok began notifying individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Address
  • Contact information
  • Health insurance information
  • Health information (e.g., diagnosis, treatment, prescription)

If you received a breach notification letter from Welltok, Inc.:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the Welltok data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Welltok, Inc.:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: