Notification of Data
MailMyPrescriptions.com Provides Notification of Data Security Incident
MailMyPrescriptions.com Pharmacy Corporation ("MailMyPrescriptions.com"), announced today that it provided notifications following a data security incident that may have impacted limited protected health information belonging to certain current and former customers. While MailMyPrescriptions.com is not aware of any evidence to suggest that any information was actually viewed or misused, MailMyPrescriptions.com takes the privacy and security of all information very seriously, and has worked diligently to remediate the incident and support those impacted.
On November 24, 2020, MailMyPrescriptions.com became aware of suspicious activity related to one employee email account. Upon learning this, MailMyPrescriptions.com took swift action to secure its email system and network. MailMyPrescriptions.com also immediately launched an internal investigation and engaged leading, independent cybersecurity experts. As a result of this investigation, on January 15, 2021, MailMyPrescriptions.com confirmed that one employee email account was accessed without authorization.
MailMyPrescriptions.com worked with their outside cybersecurity experts to determine whether the accessed employee email account contained personal information and/or protected health information that may have been subject to unauthorized access as a result. On February 17, 2021, as a result of that review, MailMyPrescriptions.com learned that information belonging to certain customers was contained within the accessed email account. MailMyPrescriptions.com has worked diligently to provide notice of the incident to potentially affected individuals.
The personal information that could have been viewed by the unauthorized individual(s) may have included individuals’ first and last name, in combination with one or more of the following data elements: prescription information; treatment/diagnosis information; and health insurance information. It is important to note, as mentioned above, that there is no evidence to suggest that any personally identifiable information or personal health information has been actually accessed or misused. Rather, MailMyPrescriptions.com confirmed that the account was subject to unauthorized access and provided notification in an abundance of caution. The information potentially impacted was within the affected employee email account in the normal course and scope of business as a part of regular pharmacy operations.
The above-referenced unauthorized access was limited to one MailMyPrescriptions.com email account and did not extend to other MailMyPrescriptions.com information systems. Moreover, as stated above, MailMyPrescriptions.com is not aware of any information to suggest that any information found within the affected email account was actually viewed or misused.
Nonetheless, out of an abundance of caution, MailMyPrescriptions.com is providing notice to those potentially affected individuals. The notices include information about this incident and about steps that potentially impacted individuals can take to monitor and help protect their information. MailMyPrescriptions.com takes the security of all information very seriously and is implementing additional security measures to help prevent a similar occurrence in the future.
MailMyPrescriptions.com has established a dedicated assistance line to address any questions individuals may have which can be reached at 855-654-0882. In addition, MailMyPrescriptions.com is offering complimentary credit monitoring services through TransUnion to relevant impacted individuals. We recommend that individuals remain vigilant in regularly reviewing and monitoring all of their account statements and credit history to guard against any unauthorized transactions or activity. MailMyPrescriptions.com also notified the U.S. Health and Human Services Office for Civil Rights and consumer reporting agencies of this incident.
The privacy and protection of private information is a top priority for MailMyPrescriptions.com. MailMyPrescriptions.com deeply regrets any inconvenience or concern this incident may cause.