Walmart Stores, Inc. (AR, Healthcare Provider) reported to HHS OCR on 2016-03-01 an Unauthorized Access/Disclosure affecting 4,800 individuals. A software change caused a technical error that made ePHI viewable on Walmart's online pharmacy account portal. Exposed data included names, addresses, phone numbers, email addresses, prescriptions, insurance information, treatment information, and last four digits of credit card numbers. Breached information located on Electronic Medical Record. Walmart notified affected individuals, offered identity theft protection, and implemented additional privacy and security measures.
Affected (this filing): 4,800