"2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx"

Pharmacy prescription services provider A&A Services, which operates as Sav-Rx, has started notifying roughly 2.8 million individuals that their personal information was compromised in a cyberattack.  The company said the cyberattack occurred on October 8, 2023.  The company noted that the attackers accessed non-clinical systems containing personal information and exfiltrated their data.  The compromised information includes names, addresses, dates of birth, email addresses, phone numbers, Social Security numbers, eligibility data, and insurance identification numbers.  No clinical or financial information was compromised in the attack.  The company did not share information on the threat actor responsible for the incident or the type of attack that it fell victim to.  The notification letter suggests that the company did pay a ransom to "ensure" that the stolen information is not shared with other cybercriminals.

SecurityWeek reports: "2.8 Million Impacted by Data Breach at Prescription Services Firm Sav-Rx"