ARx Patient Solutions

ARx Patient Solutions experienced a data breach in March 2022 when an employee email account was compromised by an unauthorized third party. The incident potentially exposed personal information including names, prescription details, health insurance account numbers, and in limited cases, Social Security numbers. The company disabled the account, engaged a cybersecurity firm, and implemented enhanced security measures including XDR and threat monitoring. Affected individuals were offered one year of identity monitoring services.

ARx Patient Solutions reported to HHS on 2023-06-30 a Hacking/IT Incident affecting 41,166 individuals. Breached information located on Email. An employee was targeted by a phishing scheme compromising PHI including names, addresses, SSNs, birthdates, medications, and financial data. The entity notified HHS, individuals, and media, and strengthened security safeguards.

Affected (this filing): 41,166