Who is Capture RX?
Speare’s Pharmacy works closely with CaptureRx to determine if patients are eligible for discount drugs through a program called 340B. More information on the company can be found here https://www.capturerx.com/
What Happened?
CaptureRx was a victim of a ransomware attack. They became aware of unusual activity involving certain files on its systems. Following this discovery, CaptureRx immediately began an investigation into this activity and worked quickly to assess the security of its systems. On February 19, 2021, the investigation determined that certain files were accessed without authorization on February 6, 2021.
CaptureRx immediately began a thorough review to determine the specific files accessed and to determine whether sensitive information was present within those files at the time of the incident. This review was completed on or around March 19, 2021, at which time CaptureRx confirmed that information relating to patients associated with Speare was present in the relevant files. To date, the investigation has found no evidence of actual or attempted misuse of this information as a result of this incident.
From what Speare learned, this was a ransomware attack in which the data was held hostage and released back upon payment of the ransomware by CaptureRx.
What Information Was Involved?
The investigation determined that at the time of the incident, the following types of information from patients associated with Speare were present in the involved files: First Name, Last Name, Date of Birth, Prescription Information, and for some patients, the Medical Record Number. Notifications have been provided to all patients who may have been impacted.
What are we doing?
Data privacy and security is among CaptureRx’s and Speare’s highest priorities, and there are extensive measures in place to protect information. Upon learning of this incident, CaptureRx moved quickly to investigate and respond. This investigation and response included confirming the security of CaptureRx’s systems, reviewing the contents of the relevant files for sensitive information. Speare worked closely with CaptureRx in reviewing how this occurred and how to put steps in place to avoid this in the future.
What can patients do to learn more?
For more information, please call the dedicated assistance line provided by CaptureRx at (855) 654-0919 (toll free), Monday – Friday, 9:00 a.m. to 9:00 p.m.
What can the patient do?
Encourage the patient to remain vigilant against incidents of identity theft and fraud, to review their account statements and explanation of benefits forms, and to monitor their free credit reports for suspicious activity and to detect errors.
