Sav-Rx discloses data breach impacting 2.8 million Americans

Prescription management firm Sav-Rx notified affected parties that a cybersecurity incident in October 2023 exposed personal information for about 2,812,336 individuals — including full names, dates of birth, Social Security numbers, contact and insurance data. Systems were restored the next business day, a forensic investigation completed April 30, 2024 determined unauthorized access to non-clinical systems, the company reported no evidence of data misuse so far, and implemented controls (24/7 SOC, MFA, network segmentation, upgraded firewalls, BitLocker) while offering two years of credit monitoring.