WEL Companies
Disclosed Nov 18, 202510 months ago122,960 affectedConfirmed
What is known
| People affected | 122,960 (as reported by the organization) |
|---|---|
| Disclosed | Nov 18, 2025 |
| Discovered | Jan 31, 2025 |
| Happened | Jan 30, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health, Insurance, Social Security numbers, Government IDs |
| Sector | Other · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: WEL Companiesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: WEL Companiesatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: WEL Companiesattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: WEL Companiesjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004693: WEL Companiesoag.my.site.com · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: WEL Companiesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Nov 18, 2025 | 587 |
| Indiana AGresidents of IN | Nov 18, 2025 | 3,271 |
| California AGresidents of CA | Nov 19, 2025 | |
| Washington AGresidents of WA | Nov 19, 2025 | 978 |
| Oregon DOJresidents of OR | Nov 19, 2025 | 122,960 |
| Texas AGresidents of TX | Nov 25, 2025 | 13,157 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · data_types: ["names","health","insurance"] to ["names","health","insurance","ssn","government-id"] · backfill source
- 2026-09-25 · data_types: [] to ["names","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 122960 · backfill source
- 2026-09-25 · disclosed: 2025-11-19 to 2025-11-18 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-01-31 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.