On January 15, 2024, C.R. Pharmacy Service, Inc. d/b/a/ CarePro Health Services (“CarePro”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering that an unauthorized party gained access to its computer network. In this notice, CarePro explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, dates of birth, diagnosis & condition information, treatment information, lab results, service dates, prescription information, health insurance information, driver’s license number and financial account information. Upon completing its investigation, CarePro began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from CarePro Health Services, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the CarePro Health Services data breach. For more information, please see our recent piece on the topic here.
What Caused the CarePro Health Services Data Breach?
The CarePro Health Services data breach was only recently announced, and more information is expected in the near future. However, CarePro’s filing with the U.S. Department of Health and Human Services Office for Civil Rights provides some important information on what led up to the breach. CarePro also posted a website notice describing the incident.
According to these sources, on November 16, 2023, CarePro learned that it was experiencing a network disruption impacting employees’ ability to access certain parts of the company’s computer network. In response, CarePro began working with third-party data security specialists to investigate the incident and determine what, if any, consumer data was impacted as a result.
Ultimately, the CarePro investigation confirmed that an unauthorized party accessed and acquired information from the company’s IT network on or around November 14, 2023. CarePro also determined that some of the files accessible by the unauthorized party contained confidential consumer information.
After learning that sensitive consumer data was accessible to an unauthorized party, CarePro Health Services reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, contact information, date of birth, diagnosis & condition information, treatment information, lab results, service dates, prescription information, health insurance information, driver’s license number and financial account information.
On January 15, 2024, CarePro Health Services sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About CarePro Health Services
CarePro Health Services is a healthcare services company with a headquarters in Cedar Rapids, Iowa. CarePro provides home care, healthy living, home medical and pharmacy services through seven locations in and around Cedar Rapids, IA. CarePro employs more than 160 people and generates approximately $25 million in annual revenue.
