CR Pharmacy Services, Inc.

CR Pharmacy Services, Inc. suffered a data breach reported by the Vermont Office of the Attorney General on January 23, 2024. Unauthorized access to the company’s systems occurred around November 14, 2023, potentially exposing sensitive personal information of affected individuals. The compromised data may include names, contact details, Social Security numbers, and health records. While the exact number of impacted individuals remains undisclosed, the breach poses significant risks due to the nature of the exposed information, particularly health and financial data, which could lead to identity theft, fraud, or other malicious exploitation. The incident underscores vulnerabilities in the company’s cybersecurity defenses, raising concerns about the protection of customer privacy and regulatory compliance. The breach’s broader implications for trust and operational integrity are yet to be fully assessed as investigations continue.

Source: https://ago.vermont.gov/document/2024-01-23-cr-pharmacy-services-dba-carepro-services-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/corporate-pharmacy-services-inc

"id": "cor249091725",
"linkid": "corporate-pharmacy-services-inc",
"type": "Breach",
"date": "11/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Healthcare/Pharmacy',
                        'location': 'Vermont, USA',
                        'name': 'CR Pharmacy Services, Inc.',
                        'type': 'Private Company'}],
 'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['names',
                                                         'contact information',
                                                         'Social Security '
                                                         'numbers',
                                                         'health information'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_publicly_disclosed': '2024-01-23',
 'description': 'The Vermont Office of the Attorney General reported that CR '
                'Pharmacy Services, Inc. experienced a data breach, with '
                'unauthorized access occurring on or around November 14, 2023. '
                'The breach may have involved personal information of affected '
                'individuals, including names, contact information, Social '
                'Security numbers, and health information. The specific number '
                'of individuals affected is currently unknown.',
 'impact': {'data_compromised': ['names',
                                 'contact information',
                                 'Social Security numbers',
                                 'health information'],
            'identity_theft_risk': 'High (PII and health data exposed)'},
 'initial_access_broker': {'high_value_targets': ['PII', 'PHI']},
 'investigation_status': 'Ongoing (number of affected individuals unknown)',
 'references': [{'date_accessed': '2024-01-23',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['Potentially HIPAA (health '
                                                    'data)',
                                                    'State breach notification '
                                                    'laws'],
                           'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at CR Pharmacy Services, Inc.',
 'type': 'Data Breach'}