Four details:
- The unsecured data was discovered by cybersecurity researcher Jeremiah Fowler in late March. He swiftly alerted the company of the breach.
- CVS said the database was hosted by a third-party vendor. CVS will continue to utilize the vendor and is working toward preventing a recurrence, according to a news statement obtained by ABC News.
- Breach records did not include patient data, but Mr. Fowler said some of the information revealed in the searches could have been linked to someone’s identity.
- “Some search entries included email addresses and should be a wake-up call for companies to ensure their data security is solid,” he said. “There were certain times where individuals put their own email addresses into the search bar and then that correlated with a visitor ID and user ID, and then usually it showed what they searched for. So, hypothetically, you could have connected those three and figured it out.”
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.