Medication benefits provider Sav-Rx says data breach impacted over 2.8 million individuals

Nebraska-based medication benefits management services provider Sav-Rx experienced a significant data security incident that compromised the sensitive personal information of more than 2.8 million individuals.

 

In a data breach notice filed with the Office of the Maine Attorney General, Sav-Rx said that on October 8, it identified suspicious activity in its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

Sav-Rx also took steps to contain the incident and said it was able to restore its affected network the next business day without causing any delay in prescription refills.

 

“As part of the investigation, we learned that an unauthorised third party was able to access certain non-clinical systems and obtained files that contained health information,” Sav-Rx said.

 

“After an extensive review with third-party experts, on April 30, 2024, we discovered that some of the data accessed or acquired by the unauthorised third party may have contained your protected health information.

“Based on the results of the forensic investigation, we believe the unauthorised third party first accessed the IT System on or around October 3, 2023,” it added.

 

According to Sav-Rx, the compromised data included names, dates of birth, Social Security Numbers, email addresses, physical addresses, phone numbers, eligibility data, and insurance identification numbers. The filing with the Maine state regulator also states that at least 2,812,336 individuals were impacted by the data breach.

 

Sav-Rx said that not all customers were impacted, but has advised all affected individuals to regularly monitor their credit reports, bank accounts and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

The company has also offered two years of complimentary identity protection and credit monitoring services through Equifax to all affected individuals.