Adirondack Health Reports Vendor Data Breach

Adirondack Health
May 20, 2021

Adirondack Health’s former third-party vendor CaptureRx was effected by a data breach that involved the information of a number of Adirondack Health patients. Additional information about the breach and a toll-free phone number to determine whether your information is affected can be found here.

See below for Adirondack Health's press release regarding the breach.

Adirondack Health reports vendor data breach

 

SARANAC LAKE – Adirondack Medical Center d/b/a Adirondack Health was recently notified that a former vendor, CaptureRx, experienced a data breach in February of this year.

CaptureRx is a third-party administrator that previously provided certain services to Adirondack Health’s 340B program, which reduces prescription drug costs. Adirondack Health no longer conducts any business with CaptureRx but is investigating the matter and communicating with CaptureRx to ensure measures are put in place by the vendor to protect against any further breaches. To date, CaptureRx is unaware of any actual or attempted misuse of patient information as a result of this incident.

The breach included certain limited patient information and affected patients of medical providers across the United States, including 877 patients of Adirondack Health. CaptureRx will notify each individual involved in the breach with a letter containing information about the incident.

CaptureRx became aware of unusual activity involving certain files on its systems and notified medical providers, including Adirondack Health, on March 30. CaptureRx began an investigation into the activity and determined that, on February 6,certain files were accessed without authorization. The CaptureRx investigation and response included confirming the security of CaptureRx’s systems, reviewing the contents of the relevant files for sensitive information, and notifying business partners associated with that sensitive information. All CaptureRx policies and procedures are also being reviewed and additional workforce training conducted to reduce the likelihood of a similar event in the future.

CaptureRx reviewed the full contents of the files to determine whether sensitive information was present at the time of the breach. On or around March 19,CaptureRx confirmed that some information for Adirondack Health patients was present in the relevant files.

The CaptureRx investigation determined that, at the time of the incident, the relevant files contained certain patients’ first names, last names, dates of birth, prescription information, and for some, medical record numbers. Adirondack Health is providing patients with this notice to ensure that all those affected are aware of the incident.

CaptureRx encourages affected patients to remain vigilant, review their account statements and explanation of benefits forms, place ‘fraud alerts’ or ‘credit freezes’ on their credit files, and monitor their free credit reports for suspicious activity and errors.

Questions should be directed to CaptureRx’s dedicated assistance line at 855-654-0919 (toll free),Monday-Friday, 9 a.m. to 5 p.m.

back to topback to blog list Page