Medical Depot, Inc.

Medical Depot, a healthcare organization, experienced an external system breach on May 25, 2020, which was discovered on June 4, 2020. The breach affected 2 Maine residents, compromising their names and financial account information, including credit/debit card numbers with security codes. In response, the company offered 24 months of complimentary credit monitoring and identity theft protection services through Equifax, with notifications sent to affected individuals on July 3, 2020, and September 11, 2020.

Medical Depot, Inc. (d/b/a Drive DeVilbiss Healthcare) disclosed that an unauthorized third party gained remote access to its network on or about June 4, 2020. The actor acquired and briefly possessed an electronic file system containing internal company information, including employee and beneficiary data such as names, SSNs, bank account numbers, tax IDs, and health condition information. The company engaged cybersecurity experts, contacted law enforcement, and offered credit monitoring. The investigation was ongoing at the time of notification.

Samela, Inc. d/b/a NorthShore Care Supply reported a data security incident involving its online ordering website. The breach occurred between June 7, 2015, and August 24, 2015, potentially exposing customer credit/debit card numbers, verification codes, expiration dates, names, and addresses. The company engaged forensic experts and offered 12 months of identity protection via AllClear ID. Remediation included rebuilding the e-commerce site on a new server and enhancing intrusion monitoring.

San Jose Medical Supply Co., Inc. disclosed a breach of protected health information (PHI) and personal data (SSN, DOB, address) occurring between August and December 2011. Former employees, officers, and agents of the company unauthorizedly disclosed customer information to third parties (Front Medical Supplies and Living Medical). The breach was discovered in June 2013 by new management following a forensic investigation. The company notified the California Attorney General, HHS, and local media, and took remedial actions including terminating responsible employees and enhancing security protocols.