What Happened?
On January 22, 2025, Numotion became aware of a security incident involving unauthorized access to certain employee email accounts. Upon detection, Numotion launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to email accounts on several occasions between September 2, 2024, and November 18, 2024. Numotion conducted a comprehensive review of the impacted emails to determine what information was compromised and identified affected individuals. On March 7, 2025, Numotion filed a notice with the U.S. Department of Health and Human Services Office for Civil Rights (OCR) and started sending out notice letters to the impacted individuals.