Notice to Ellis patients of third party data breach
Wednesday, August 11, 2021
ORIGINALLY POSTED ON MAY 25, 2021 -- Ellis Medicine was notified on March 30, 2021, that Capture RX, a third party business associate, experienced a data breach on February 6, 2021. The breach included limited data on 58,117 patients of Ellis Medicine. Capture RX will be notifying each individual involved in the breach with a letter, with the exception of 4 patients for which we were unable to verify a valid mailing address.
CaptureRx is a third party administrator that provides services to FSLH regarding the 340B program which reduces prescription drug costs.
What Happened? Capture Rx recently became aware of unusual activity involving certain files on its systems. Following this, CaptureRx immediately began an investigation into this activity and worked quickly to assess the security of its systems. On February 19, 2021, the investigation determined that certain files were accessed on February 6, 2021 without authorization.
CaptureRx immediately began a thorough review of the full contents of the files to determine whether sensitive information was present at the time of the incident. On or around March 19, 2021, CaptureRx confirmed that some information for Ellis patients was present in the relevant files. To date, CaptureRx is unaware of any actual or attempted misuse of patient information as a result of this incident.
What Information Was Involved? The investigation determined at the time of the incident, the relevant files contained the following Data Elements (First Name, Last Name, Date of Birth, Prescription Information, and for some patients, the Medical Record Number). Please note that while their investigation has not identified any actual or attempted misuse of the patient information, we are providing patients this notice to ensure that all those affected are aware of this incident.
What is CaptureRx Doing? Data privacy and security is among CaptureRx’s highest priorities, and there are extensive measures in place to protect information in CaptureRx’s care. Upon learning of this incident, CaptureRx moved quickly to investigate and respond. This investigation and response included confirming the security of CaptureRx’s systems, reviewing the contents of the relevant files for sensitive information, and notifying business partners associated with that sensitive information. As part of CaptureRx’s ongoing commitment to the security of information, all policies and procedures are being reviewed and enhanced and additional workforce training is being conducted to reduce the likelihood of a similar event in the future.
What Patients Can Do. We encourage affected patients to remain vigilant against incidents of identity theft and fraud, to review their account statements and explanation of benefits forms, and to monitor their free credit reports for suspicious activity and to detect errors.
For More Information. Those impacted patients will receive a letter in the mail and for any additional questions, can call CaptureRx’s dedicated assistance line at 855-654-0919 (toll free), Monday – Friday, 9 a.m. to 5 p.m., Eastern Time.
(originally posted on May 24, 2021)
Ellis Medicine | Newsroom
Ellis Medicine Media Inquiries
Media inquiries should be directed to the Communications Department at Ellis Medicine. The Communications Department is open and staffed Monday through Friday, from 9:00 am until 5:00 pm. The department can be reached by phone at 518.232.9288. If you leave a message your call will typically be returned within 24 hours.
All official communications regarding Ellis Medicine are arranged through the Communications Department. We look forward to working with members of the public and media organizations to provide accurate, up-to-date information about Ellis Medicine.
1101 Nott Street
Schenectady, NY 12308