CaptureRx helps hospitals manage their 340B drug programs and said it discovered unusual activity in some of its files back in February. Compromised files contained patient records with protected health information, including names, birthdates and prescription details.
A list of hospitals and healthcare providers that have reported breaches stemming from the incident and the number of patients affected:
- Faxton St. Luke’s Healthcare, an affiliate of Mohawk Valley Health System (Utica, N.Y.): more than 17,000
- Ascension Standish (Mich.) Hospital: 1,705
- Ascension St. Joseph Hospital (Tawas City, Mich.): 5,807
- Lourdes Hospital (Binghamton, N.Y.): unknown
- Gifford Health Care (Randolph, Vt.): 6,777
- UPMC Cole (Coudersport, Pa.) and UPMC Wellsboro (Pa.): 7,400
- Bayhealth (Dover, Del.): unknown
- Walmart: unknown