Sutter Health

Companies / web services

Aliases / services: サター・ヘルス / Sutter Health
Official website: https://www.sutterhealth.org/

Sources identifying the operating company

https://vitals.sutterhealth.org/sutter-health-vendor-reports-patient-information-incident/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Sutter Health patient communications data held by Welltok

Response status: Not listed
Response information checked: 2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Disclosed November 3, 2023: Welltok's MOVEit was accessed and data taken on May 30–31, 2023, potentially affecting Sutter patient information. SSNs and financial information were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Check the affected fields in your mailed notice and review statements and credit reports. Use the notice's guidance or Sutter Health's official contact for questions.

Official service URL

https://www.sutterhealth.org/

Source URLs

Official operator evidencehttps://vitals.sutterhealth.org/sutter-health-vendor-reports-patient-information-incident/Service and operation documentation
Official incident noticehttps://oag.ca.gov/system/files/Welltok%20Patient%20Notification%20Letter_Redacted.pdfService and operation documentation

Related official sources

Official operator evidenceOfficial information directoryIdentifies Sutter Health and the relevant scope.
Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.