VectraRx Mail Pharmacy says cyber attack impacted about 110,000 customers

Mail-order pharmacy chain VectraRx Mail Pharmacy said the data security incident it suffered last year compromised the sensitive personal information of close to 110,000 individuals.

 

In a data security incident notice posted on its website, VectraRx said that on December 13, it detected unusual activity in its internal network. The pharmacy immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“Per that investigation, VRMP determined that an unauthorised actor(s) may have viewed and copied certain data stored by VRMP. VRMP then conducted a comprehensive review of the potentially impacted data to identify potentially impacted individuals,” reads the notice.

 

The compromised data included dates of birth, Rx numbers, Rx information, dates of service, and Social Security Numbers. VectraRx reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights, stating that at least 109,383 individuals were impacted by the breach.

 

“VRMP is committed to ensuring the security and privacy of all personal information in its control. Upon discovery of the Event, VRMP moved quickly to investigate and respond to the Event. Specifically, VRMP informed its law firm and began identifying the affected individuals in preparation for notice,” the pharmacy added.

 

While the company found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered up to two years of complimentary identity protection and credit monitoring services through Identity Defense to all affected individuals.

 

At the time of publishing, no known hacker group has claimed responsibility for the cyber attack on the online pharmacy giant. The company also did not share details on who is behind the attack or if it has paid a ransom.