CaptureRx Data Breach
updated 06/03/2021
Esperanza Health Center was notified on April 6, 2021, that Capture Rx, a third party administrator that provides services to Esperanza regarding the 340B program which reduces prescription drug costs, experienced a data breach on February 19, 2021.
The breach included limited data on 3100 patients of Esperanza that received prescriptions at participating Rite Aid pharmacies. Capture Rx has notified each individual involved in the breach with a letter.
What Happened?
Capture Rx recently became aware of unusual activity involving certain files on its systems. Following this, CaptureRx immediately began an investigation into this activity and worked quickly to assess the security of its systems. On February 19, 2021, the investigation determined that certain files were accessed on February 6, 2021 without authorization.
CaptureRx immediately began a thorough review of the full contents of the files to determine whether sensitive information was present at the time of the incident. On or around March 19, 2021, CaptureRx confirmed that some information for Esperanza patients was present in the relevant files. To date, CaptureRx is unaware of any actual or attempted misuse of patient information as a result of this incident.
What Information Was Involved?
The investigation determined at the time of the incident, the relevant files contained the following Data Elements (First Name, Last Name, Date of Birth, Prescription Information, and for some patients, the Medical Record Number). We can report that no medical records, social security numbers nor financial details, including credit card or banking information, were affected.
What is being done?
Esperanza is issuing this notice to ensure that all affected patients are informed of this incident and that affected patients are aware of the resources being made available to them. In addition, Capture Rx has sent out written notifications to all patients that were affected by the breach. A toll-free line dedicated to addressing questions for affected patients has been established. The toll-free number is (855)654-0919 and is available Monday-Friday from 9am-9pm.
Any Esperanza patient that has questions regarding this event can also call Esperanza’s Compliance Officer, Juan Perez, at 215-807-8616, with any questions or concerns.
What Patients Can Do?
We encourage affected patients to remain vigilant against incidents of identity theft and fraud, to review their account statements and explanation of benefits forms, and to monitor their free credit reports for suspicious activity and to detect errors.
More Information
Link to Capture Rx full notice and list of affected organizations: