HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
INJURED WORKERS PHARMACY, LLC
bd_0366b430e038b111 · schema v1 · pii pii-v1
Full breach record for INJURED WORKERS PHARMACY, LLC →Injured Workers Pharmacy (IWP) notified Delaware regulators of a data event involving unauthorized access to seven employee email accounts between January 16, 2021, and May 12, 2021. The breach exposed patient information, including names and government identifiers (SSN, DOB, driver's license). IWP reset passwords, enhanced security measures, and reported the incident. Rhode Island residents (503 known) were also impacted.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0da3cefbaa48d84aOregon State AGfiled 2022-02-03(51d gap)Verified by operator
- bd_89cd2fca5e2a5b73Montana State AGfiled 2022-02-03(51d gap)Verified by operator
- bd_cbd9b158361df2b7Maine State AGfiled 2022-02-03(51d gap)Verified by operator
- bd_e517b01e2e7103c5Delaware State AGfiled 2022-02-03(51d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/02/Pages-from-Notice-of-Data-Event-IWP-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 14, 2021
- Raw hash
- 326311711b9dbe3d33f7922871b3a139029363cafbb9a86401391c3a56fed76e
Reporting entity
- Name
- INJURED WORKERS PHARMACY, LLCnorm: injured workers pharmacy
Victim entity
- Name
- INJURED WORKERS PHARMACY, LLCnorm: injured workers pharmacy
Incident
- Discovered
- May 11, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported this event to government regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.