On November 18, 2022, Wright & Filippis reported a data breach with the U.S. Department of Health and Human Services Office for Civil Rights as well as the California Attorney General after the company learned it had been the target of a ransomware attack. According to Wright & Filippis, the breach resulted in the names, dates of birth, patient numbers, Social Security numbers, financial account numbers, and health insurance information being compromised. Recently, Wright & Filippis sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.

Those who receive a “Notice of Data Breach” letter from Wright & Filippis have reason to be concerned, as data breach victims are at a much higher chance of falling victim to identity theft and other frauds. However, as we’ve discussed in previous posts, there are steps you can take to reduce these risks. Further, if evidence emerges that Wright & Filippis was negligent in how it stored your data, you may be able to pursue a data breach lawsuit against the company.

What We Know About the Wright & Filippis Data Breach

The available information regarding the Wright & Filippis breach comes from the company’s filing with the Attorney General of California. While the company also provided notice to the Department of Health and Human Services Office for Civil Rights, the information posted on the HHS-OCR Data Breach Portal is limited. According to the data breach letter filed with the California AG, Wright & Filippis recently learned that it was the target of a cyberattack. The company discovered the attack shortly after it was conducted and thereafter enlisted the help of third-party experts to assist with the company’s investigation.

The Wright & Filippis investigation confirmed that an unauthorized party was able to access—and potentially remove—files containing sensitive consumer information stored on its computer network.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Wright & Filippis began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, patient number, Social Security number, financial account numbers, and health insurance information

On November 18, 2022, Wright & Filippis sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Wright & Filippis

Founded in 1944, Wright & Filippis is a manufacturing company based in Rochester Hills, Michigan. The company specializes in the design and manufacture of prosthetics, orthotics, and accessibility solutions. Wright & Filippis operates approximately 18 retail stores throughout Michigan. Wright & Filippis employs more than 290 people and generates approximately $31 million in annual revenue.