A former third-party vendor of Altru Health System says earlier this year there was an incident related to data received from medical service providers, including Altru, but no personal financial information was compromised.
CaptureRx says its investigation showed that some electronic files were accessed and acquired on Feb. 6 without permission.
In March, a review of CaptureRx determined that affected people included those receiving prescription drugs through Altru’s 340B pharmacy program using CVS and Thrifty White Drug.
CaptureRx says the affected files contained first name, last name, date of birth and prescription information. But no financial information was affected or compromised.
Altru claims that all the persons whose information was contained in the files, as well as the corresponding regulatory authorities, have been notified.
A former third-party provider of Altru Health System, CaptureRX, has reported that in February 2021 there was an incident related to data received from healthcare providers, including Altru.
On or about February 19, 2021, CaptureRX learned of the unusual activity involving certain electronic files.
CaptureRx immediately initiated an investigation into this activity and determined that certain files were accessed and acquired on February 6, 2021 without authorization.
By March 19, 2021, CaptureRx completed a full review of the files and determined that those affected included people receiving prescription drugs through Altru’s 340B pharmacy program using CVS and Thrifty White Drug.
CaptureRx’s investigation determined that the affected files contained first name, last name, date of birth, and prescription information. No financial information was affected or compromised.
After learning of this incident, CaptureRx moved quickly to investigate and respond. This investigation and response included confirmation of the security of CaptureRx systems, review of the contents of the relevant files for confidential information, and notification of covered entities associated with this confidential information.
As part of CaptureRx’s ongoing commitment to information security, all policies and procedures are being reviewed and improved, and additional staff training is underway to reduce the likelihood of a similar future event.
Following the notification of this data incident by Capture Rx in May 2021, Altru has supported CaptureRx’s investigation and notification to all persons whose information was in the files, as well as the authorities. corresponding regulators. People with affected information will receive an email notification.
CaptureRx has set up a dedicated helpline at (855) 654.0919 (free), Monday through Friday from 8 a.m. to 8 p.m. CST for any questions from affected people. Data privacy is of the utmost importance to Altru Health System.
Altru complies with the privacy and security rules that protect patient health information (“PHI”) as set forth in the Federal Health Insurance Portability and Liability Act of 1996 (“HIPAA”), the Health Technology Act. health information for economic and clinical health (“HITECH”), and other statutes, federal and state regulations.
Altru also guarantees the secure and encrypted transfer of all PHIs to partner companies. Altru will complete his own investigation of this incident.
Altru will continue to prioritize the privacy and security of all IHPs and apply the same standards to its providers who have access to individually identifiable information.
While no financial information is compromised, Altru and CaptureRx encourage individuals to stay alert for incidents of identity theft and fraud, review account statements and ways to explain benefits, and monitor reports. free credit to detect suspicious activities and detect errors.