Prescription Service Sav-RX Data Breach Impacts 2.8 Million Americans

Prescription service Sav-RX recently disclosed that a data breach that occurred last year could impact over 2.8 million US residents.

Hackers stole personal files belonging to 2,812,336 people after infiltrating the company’s network during the October 2023 incident, the company said.

Sav-RX Suffered a Massive Data Breach in October 2023

"On October 8, 2023, we identified an interruption to our computer network,” reads the company’s security advisory. “As a result, we immediately took steps to secure our systems and engaged third-party cybersecurity experts. Our information technology systems ("IT System") were restored the next business day, and prescriptions were shipped on time without delay."

According to Sav-RX’s notification, threat actors may have accessed and/or stolen sensitive customer information, including names, dates of birth, social security numbers, email addresses, home addresses, phone numbers, eligibility data and insurance identification numbers. The company emphasized that the perpetrators didn’t access clinical or financial information.

Data Breach Investigation Lasted Approximately 8 Months

Although the company was able to restore its system within a day of the incident, the investigation to determine the full extent of the stolen personal data lasted about eight months.

After the investigation, it was revealed that the threat actors initially accessed personal data on Oct. 3, 2023. According to the FAQ section on Sav-RX’s website, notifying impacted customers took as long as eight months because the company prioritized “restoring systems to minimize any interruption to patient care.”

Customers Advised to Check if They Were Impacted

Some customers left too little contact information to be notified, so the company advises customers to verify if they were affected by the breach by calling 888-326-0815.

After the breach, Sav-RX implemented several security measures, including a 24/7 security operations center, multi-factor authentication (MFA) on critical accounts, geo-blocking, BitLocker encryption, network segmentation, and upgraded firewalls. It also gave affected customers complimentary two-year subscription plans for credit monitoring and identity theft services.

Data Breaches and Protecting Your Digital Footprint

Despite maintaining excellent digital hygiene with your online data, data breaches can still occur, and there's limited action you can take to minimize the damage.

However, there is a silver lining: specialized services such as Bitdefender Digital Identity Protection can help you stay ahead of threat actors by monitoring your online data, notifying you of breaches affecting it and letting you instantly patch vulnerabilities in your digital footprint.