Sav-Rx medication benefits provider reports data breach
Learn More
Sav-Rx, a medication benefits management service provider operating under A&A Services, is reporting a data breach incident potentially exposing the personal and health information of over 2.8 million individuals in the United States.
The incident was first detected on October 8, 2023 when the company identified unauthorized access to its computer network. Sav-Rx engaged third-party cybersecurity experts to contain and investigate the breach.
The breach investigation revealed that an unauthorized third party accessed non-clinical systems and obtained files containing personal and health information, including:
- Names
- Dates of birth
- Social security numbers
- Email addresses
- Physical addresses
- Phone numbers
- Eligibility data
- Insurance identification numbers
Sav-Rx confirmed that the unauthorized party destroyed the acquired data and did not disseminate it further. It is unclear if a ransom was paid.
Sav-Rx claims that clinical and financial information remained secure. The affected IT systems were restored the next business day, ensuring no disruption to patient care or prescription services.
The investigation concluded on April 30 2024, and notifications to impacted individuals were sent out beginning May 24.
To mitigate potential harm, Sav-Rx offers two years of complimentary credit monitoring and identity theft protection through Equifax.
