{"id":184790,"date":"2021-02-21T19:35:42","date_gmt":"2021-02-21T16:35:42","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/some-pharmacy-customer-data-impacted-in-vendor-hack\/"},"modified":"2021-02-21T19:35:42","modified_gmt":"2021-02-21T16:35:42","slug":"some-pharmacy-customer-data-impacted-in-vendor-hack","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/some-pharmacy-customer-data-impacted-in-vendor-hack\/","title":{"rendered":"#Some pharmacy customer data impacted in vendor hack"},"content":{"rendered":"

“#Some pharmacy customer data impacted in vendor hack<\/strong>”<\/p>\n

\n
\n
\n
\"Kroger
\n This June 17, 2014, file photo, shows a Kroger store in Houston. Kroger Co. says it was among the multiple victims of a data breach involving a third-party vendor’s file-transfer service and is notifying potentially impacted customers, offering them free credit monitoring. The Cincinnati-based grocery and pharmacy chain said in a statement Friday, Feb. 19, 2021, that it believes less than 1% of its customers were affected, specifically some using its Health and Money Services, as well as some current and former employees because a number of personnel records were app<\/a>arently viewed. (AP Photo\/David J. Phillip, File)
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

Kroger Co. says personal data, including Social<\/a> Security numbers of some of its pharmacy and clinic customers, may have been stolen in the hack of a third-party vendor’s file-transfer service.<\/p>\n

The Cincinnati-based grocery and pharmacy chain said in a statement Friday<\/a> that it believes less than 1% of its customers were affected\u2014specifically some using its Health and Money Services\u2014as well as some current and former employees because a number of personnel records were apparently viewed.<\/p>\n

It says it is notifying those potentially impacted, offering free credit-monitoring.<\/p>\n

Kroger said the breach did not affect Kroger stores’ IT systems or grocery store systems or data and there has so far been no indication of fraud involving accessed personal data.<\/p>\n

The company, which has 2,750 grocery retail stores and 2,200 pharmacies nationwide, said Sunday in response to questions from The Associated Press that an investigation into the scope of the hack was ongoing.<\/p>\n

A Kroger spokeswoman said via email that affected patient information could include “names, email addresses, phone numbers, home addresses, dates of birth, Social Security numbers” as well as information on health insurance, prescriptions and medical history.<\/p>\n

Federal law requires organizations that handle personal healthcare information to inform the Department of Health and Human Services of any data breaches.<\/p>\n

Kroger said it was among victims of the December hack of a file-transfer product called FTA developed by Accellion, a California-based company, and that it was notified of the incident on Jan. 23, when it discontinued use of Accellion’s services. Companies use the file-transfer product to share large amounts of data and hefty email attachments.<\/p>\n

Accellion has more than 3,000 customers worldwide. It has said that the affected product was 20 years old and nearing the end of its life. The company said on Feb. 1 <\/a> that it had patched all known FTA vulnerabilities.<\/p>\n

Other Accellion customers affected by the hack include the University of Colorado, Washington State’s auditor, Australia’s financial regulator, the Reserve Bank of New Zealand and the prominent U.S. law firm Jones Day.<\/p>\n

For Washington State’s auditor, the hack was particularly serious. Exposed were files on 1.6 million claims obtained in its investigation of massive unemployment fraud last year.<\/p>\n

In the case of Day, cybercriminals seeking to extort the law firm dumped an estimated 85 gigabytes of data<\/a> online they claimed to have stolen.<\/p>\n

Former President Donald Trump is among Day’s clients but the criminals told the AP via email that none of the data was related to him. The AP reached out to the criminals with questions via email on the dark website where they posted documents stolen from the law firm.<\/p>\n

It is not known if the criminals extorting Day were also responsible for the Accellion hack.\n <\/p>\n\n

\n

Hack may have hit 4.6 mln online brokerage customers<\/a>\n <\/div>\n

\n

\n \u00a9 2021 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.<\/p>\n

<\/p>\n

\n

Citation<\/strong>:
\n Kroger: Some pharmacy customer data impacted in vendor hack (2021, February 21)
\n retrieved 21 February 2021
\n from https:\/\/techxplore.com\/news<\/a>\/2021-02-kroger-latest-victim-third-party-software.html<\/p>\n

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
\n part may be reproduced without the written permission. The content is provided for information purposes only.<\/p><\/div>\n<\/p><\/div>\n