CAPSULE GROUP, LLC

On April 5, 2022, Capsule discovered that unauthorized threat actors gained access to certain customer accounts. The incident involved demographic information (name, email, phone, address, DOB, sex), health information (medical conditions, prescribed medications), past order history, limited payment information (last 4 digits of card, expiration date), insurance information, and chat messages. Capsule engaged a third-party forensic firm, reset passwords, implemented additional security safeguards, and offered 12 months of complimentary Experian IdentityWorks identity protection services.

On April 5, 2022, Capsule discovered that unauthorized threat actors gained access to certain customer accounts. The incident involved demographic information (name, email, phone, address, DOB, sex), health information (medical conditions, prescribed medications), past order history, limited payment information (last 4 digits of card, expiration date), insurance information (group ID, cardholder ID), and chat messages. Capsule engaged a third-party forensic firm, reset passwords, implemented additional security safeguards, and offered 12 months of complimentary Experian IdentityWorks identity protection services.

Capsule, Inc. reported to HHS on 2022-05-27 a Hacking/IT Incident affecting 27,625 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, DOB, diagnoses, and medications. The entity provided credit monitoring and implemented technical safeguards.