GenRx Pharmacy

GenRx Pharmacy (AZ), a healthcare provider, reported to HHS OCR a ransomware attack affecting ePHI of 137,110 individuals. Compromised data on a network server included names, addresses, Social Security numbers, dates of birth, health insurance information, prescribed medications, and other treatment information. The CE notified HHS, affected individuals, and the media. Remediation included revised policies/procedures and new technical safeguards; OCR obtained assurances of corrective action.

GenRx Pharmacy experienced a ransomware attack on September 27-28, 2020. The attacker deployed ransomware but GenRx maintained access to backups. The attacker exfiltrated a small number of files containing patient health information (names, DOB, addresses, medication lists, health plan IDs) and prescription data. No SSN or financial data was affected. GenRx terminated access, engaged forensic experts, and implemented security upgrades including MFA and enhanced monitoring. Notifications were sent to affected individuals in California, Colorado, Illinois, and DC.