UTICA, N.Y. – Faxton St. Luke’s Healthcare (FSLH), an affiliate of the Mohawk Valley Health System (MVHS), was notified on March 30, 2021, that Capture RX, a third party business associate, experienced a data breach on Feb. 6, 2021.
The breach included limited data on 17,655 patients of FSLH.
Capture RX will be notifying each individual involved in the breach with a letter, with the exception of 100 patients for which we were unable to verify a valid mailing address.
CaptureRx is a third party administrator that provides services to FSLH regarding the 340B program which reduces prescription drug costs.
What Happened? Capture Rx recently became aware of unusual activity involving certain files on its systems. Following this, CaptureRx immediately began an investigation into this activity and worked quickly to assess the security of its systems. On Feb. 19, 2021, the investigation determined that certain files were accessed on Feb. 6, 2021 without authorization.
CaptureRx immediately began a thorough review of the full contents of the files to determine whether sensitive information was present at the time of the incident. On or around March 19, 2021, CaptureRx confirmed that some information for FSLH patients was present in the relevant files. To date, CaptureRx is unaware of any actual or attempted misuse of patient information as a result of this incident.
What Information Was Involved? The investigation determined at the time of the incident, the relevant files contained the following Data Elements (First Name, Last Name, Date of Birth, Prescription Information, and for some patients, the Medical Record Number). Please note that while their investigation has not identified any actual or attempted misuse of the patient information, we are providing patients this notice to ensure that all those affected are aware of this incident.
What is CaptureRx Doing? Data privacy and security is among CaptureRx’s highest priorities, and there are extensive measures in place to protect information in CaptureRx’s care. Upon learning of this incident, CaptureRx moved quickly to investigate and respond. This investigation and response included confirming the security of CaptureRx’s systems, reviewing the contents of the relevant files for sensitive information, and notifying business partners associated with that sensitive information. As part of CaptureRx’s ongoing commitment to the security of information, all policies and procedures are being reviewed and enhanced and additional workforce training is being conducted to reduce the likelihood of a similar event in the future.
What Can Patients Do? We encourage affected patients to remain vigilant against incidents of identity theft and fraud, to review their account statements and explanation of benefits forms, and to monitor their free credit reports for suspicious activity and to detect errors.
For More Information: Those impacted patients will receive a letter in the mail and for any additional questions, can call CaptureRx’s dedicated assistance line at 855-654-0919 (toll free), Monday – Friday, 9 a.m. to 5 p.m., Eastern Time.