CAPSULE GROUP, LLC

On April 5, 2022, Capsule discovered that unauthorized threat actors gained access to certain customer accounts. The incident involved demographic information (name, email, phone, address, DOB, sex), health information (medical conditions, prescribed medications), past order history, limited payment information (last 4 digits of card, expiration date), insurance information (group ID, cardholder ID), and chat messages. Capsule engaged a third-party forensic firm, reset passwords, implemented additional security safeguards, and offered 12 months of complimentary Experian IdentityWorks identity protection services.