Sav-Rx Suffers Data Breach Affecting Over 2.8 Million People

Sav-Rx, a prominent medication benefits management service provider, experienced a significant data breach, potentially impacting the personal information of 2,812,336 individuals.

Sav-Rx, which operates under A&A Services, delivers medication benefits management services to various health plans, necessitating the collection and storage of personal data from health plan participants and employees.

The incident was first detected on October 8, 2023, when an interruption to the company's computer network was identified. Sav-Rx promptly engaged third-party cybersecurity experts to contain and investigate the breach.

The affected IT systems were restored the next business day, ensuring there was no disruption to patient care or prescription services. The investigation revealed that an unauthorized third party accessed non-clinical systems, obtaining files containing personal information, such as:

• names,
• dates of birth,
• social security numbers,
• email addresses,
• physical addresses,
• phone numbers,
• eligibility data, and
• insurance identification numbers.

However, it is noted that clinical and financial information remains secure.

The breach was formally discovered on April 30, 2024, and notifications to impacted individuals began on May 24, 2024. Sav-Rx has confirmed that the data acquired by the unauthorized party was destroyed and not further disseminated. To mitigate potential harm, the company offers two years of complimentary credit monitoring and identity theft protection through Equifax.

Sav-Rx has implemented enhanced security measures, including 24/7 security operations, multi-factor authentication, BitLocker encryption, new firewalls, and system hardening protocols, to prevent future incidents. The company also notified law enforcement authorities promptly after the breach was detected.

For individuals concerned about the potential impact on their personal information, Sav-Rx advises vigilance in monitoring credit reports and account statements for signs of fraud or identity theft. Affected individuals can contact Sav-Rx's call center at 888-326-0815 for further assistance and information regarding credit monitoring services.

For more information about the incident, people can visit this FAQ page published on the company’s website.