Incident

Crescent Community Health Center’s InFocus Pharmacy reports data breach


Learn More

Crescent Community Health Center’s InFocus Pharmacy in Dubuque, Iowa is reporting a data breach that occurred between December 10 and 13, 2023, potentially exposing sensitive patient information.

The breach was detected on or around December 15, 2023, when Crescent Community Health Center noticed unauthorized access to certain email accounts associated with its pharmacy. The center reported the breach to law enforcement and enlisted a national cybersecurity firm to assist with the investigation and mitigation efforts.

The compromised data includes:

  • patient names,
  • addresses,
  • dates of birth,
  • driver’s license numbers,
  • government ID numbers,
  • medical details,
  • health insurance information.
  • For a limited number of individuals, more sensitive data such as Social Security numbers, financial account information, payment card details, passport information, biometric data, IRS PINs, and usernames and passwords may also have been exposed.

The health center has not disclosed the exact number of affected individuals or the nature of the attack.

Crescent Community Health Center’s InFocus Pharmacy reports data breach