GenRx Pharmacy ransomware attack leads to HIPAA data breach disclosure

James Walker 30 December 2020 at 12:33 UTCUpdated: 30 December 2020 at 12:38 UTC

More than 130,000 patients alerted to potential data breach following healthcare cyber-attack



GenRx Pharmacy, a Scottsdale, Arizona-based healthcare organization, has warned hundreds of thousands of patients over a potential data breach following a ransomware attack earlier this year.


In a recent security alert, the company said: “On September 28, 2020, the pharmacy found evidence of ransomware on its system and immediately began an investigation, including hiring independent information security and technology experts to assist with incident response and forensic investigation.


“Together with forensic experts, the pharmacy terminated the cybercriminals’ access to the pharmacy’s systems the same day… and confirmed that an unauthorized third party deployed the ransomware only one day before (September 27, 2020).”


Read more of the latest data breach news


Although the incident response team was quick to remove the unauthorized access, GenRx said it later discovered that the malicious hackers were able to remove a “small number of files” that included healthcare information the pharmacy used to process and ship prescribed products to patients.


According to the company, the cybercriminals accessed and removed the health information of “certain former GenRx patients”, including their first and last name, address, phone number, date of birth, gender, allergies, medication list, health plan information, and prescription information.


Breach alert


An entry on the US Department of Health and Human Services’ ..

Support the originator by clicking the read the rest link below.