2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

Sav-Rx disclosed that an IT intrusion first detected on October 8 led to the likely compromise of personal data for roughly 2.8 million individuals (names, DOBs, Social Security numbers, emails, addresses, phone numbers, eligibility and insurance IDs). The company restored systems, hired third-party investigators who completed a review in April, offered two years of credit/identity monitoring, and implemented enhanced security controls; reporting notes the incident may have involved ransomware/extortion, though no dissemination or misuse of the data has been confirmed.