MetroHealth addresses data security incident
CLEVELAND, Ohio (WOIO) - A data breach is affecting patients of one of largest health systems in the Cleveland area.
MetroHealth said one of its vendors, CaptureRx, was hacked, putting the information of an unknown number of its patients at risk.
CaptureRx is a Texas-based company that helps hospitals manage their 340B drug program, providing patients access to lower costs on certain prescription drugs.
According to a statement from MetroHealth, CapureRx became aware of unusual activity regarding some electronic files and immediately began an investigation to evaluate the security of its systems.
The investigation revealed certain files were accessed Feb. 6, 2021, without authorization, according to the statement.
The cause of the security incident was identified as a “vulnerability with the build serve hosted by a third party which was then taken advantage of.” This allowed the threat to gain credentials and access the server.
CaptureRx determined the relevant files contained patient’s first and last name, date of birth, and prescription information.
There was no impact on the systems of MetroHealth or patient care.
Both CaptureRx and MetroHealth take this incident and the security of personal information very seriously, according to the statement.
CaptureRx said it’s continuing to explore ways to strengthen the security of its systems and to better protect against future incidents.
After learning of the event, CaptureRx changed all user passwords and is continuing to ensure its existing security procedures with hardening firewall rules, workforce training, and reviewing plus enhancing information security policies and procedures where needed.
CaptureRx provided MetroHealth impacted patients with written notice of the incident along with guidance on other steps that can be taken to prevent the misuse of their information.
For further questions or additional information, call CaptureRx at 855-654-0919 Monday through Friday from 9 a.m. to 9 p.m.
Copyright 2021 WOIO. All rights reserved.