CenterWell Pharmacy Inc.

The Vermont Office of the Attorney General reported that CenterWell Pharmacy experienced a data breach on December 4, 2023. The breach involved a programming issue in their mobile application that allowed another member to view personal information of a patient, affecting details such as names, RX numbers, medication names, full addresses, and the last four digits of credit card numbers. The notification of the breach was reported on December 21, 2023.

Source: https://ago.vermont.gov/document/2023-12-21-centerwell-ace-centerwell-pharmacy-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/centerwell-pharmacy

"id": "cen905072725",
"linkid": "centerwell-pharmacy",
"type": "Breach",
"date": "12/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'CenterWell Pharmacy',
                        'type': 'Pharmacy'}],
 'attack_vector': 'Programming Issue',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'RX numbers',
                                              'medication names',
                                              'full addresses',
                                              'last four digits of credit card '
                                              'numbers']},
 'date_detected': '2023-12-04',
 'date_publicly_disclosed': '2023-12-21',
 'description': 'A programming issue in the mobile application allowed another '
                'member to view personal information of a patient, including '
                'names, RX numbers, medication names, full addresses, and the '
                'last four digits of credit card numbers.',
 'impact': {'data_compromised': ['names',
                                 'RX numbers',
                                 'medication names',
                                 'full addresses',
                                 'last four digits of credit card numbers'],
            'systems_affected': ['Mobile Application']},
 'references': [{'date_accessed': '2023-12-21',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'CenterWell Pharmacy Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Mobile Application Vulnerability'}