Notice Regarding CaptureRx Data Breach

 

CaptureRx is a company that provides third-party administrative services related to 340B medication discounts to many health care entities throughout the country. Boone Memorial Health (BMH) is one of CaptureRx’s clients. Earlier this year, CaptureRx experienced a data security incident that is described in further detail below. This incident involved patients of BMH as well as patients of many other health care entities that contract with CaptureRx.

 

This event did not occur at BMH or affect the security of its electronic patient records or other computer systems. BMH takes the privacy of its patients very seriously and is working with CaptureRx to ensure that appropriate remedial measures are being taken.

 

What Happened? CaptureRx recently became aware of unusual activity involving certain of its electronic files. Following this, CaptureRx immediately began an investigation into this activity and worked quickly to assess the security of its systems. On February 19, 2021, the investigation determined that certain files were accessed and acquired on February 6, 2021 without authorization.

 

CaptureRx then immediately began a thorough review of the full contents of the files to determine whether sensitive information was present at the time of the incident. On or around March 19, 2021, CaptureRx completed this review to confirm the full scope of affected individuals and associated covered entities to which the information related.  Between March 30, 2021 and April 7, 2021 CaptureRx began the process of notifying healthcare providers of this incident, including BMH. Since then, CaptureRx has worked with healthcare providers to notify the affected individuals whose information was identified by the review.

 

What Information Was Involved? The investigation determined that, at the time of the incident, the relevant files contained first name, last name, date of birth, and prescription information. To date, CaptureRx’s investigation has not identified any actual or attempted misuse of the personal data.

 

What Is CaptureRx Doing? Data privacy and security are among CaptureRx’s highest priorities, and there are extensive measures in place to protect information in CaptureRx’s care. Upon learning of this incident, CaptureRx moved quickly to investigate and respond. This investigation and response included confirming the security of CaptureRx’s systems, reviewing the contents of the relevant files for sensitive information, and notifying covered entities associated with that sensitive information. As part of CaptureRx’s ongoing commitment to the security of information, all policies and procedures are being reviewed and enhanced and additional workforce training is being conducted to reduce the likelihood of a similar future event. CaptureRx is also working with healthcare providers to notify individuals whose information was contained in the subject files as well as notifying appropriate regulatory authorities.

 

What Patients Can Do. Although the files accessed in this incident did not contain social security numbers, addresses, and financial information, CaptureRx and BMH encourage individuals to remain vigilant against incidents of identity theft and fraud, to review account statements and explanation of benefits forms, and to monitor free credit reports for suspicious activity and to detect errors.

 

For More Information. BMH patients impacted by this incident will receive a letter in the mail from CaptureRx on behalf of BMH. Additionally, CaptureRx has established a dedicated assistance line at (855) 654-0919 (toll free), Monday – Friday, 9:00 a.m. to 5:00 p.m., Eastern Time for any questions individuals have.

 

Posted 6/2/2021