Sav-Rx Details

    Organization Logo

    Sav-Rx

    300 employees • Health Care and Social Assistance

    Industry

    Health Care and Social Assistance

    Security Incidents

    1

    Sav-Rx is a family-owned company based in Fremont, Nebraska, that specializes in pharmacy benefits management and mail-order prescription services. Founded in 1966, Sav-Rx aims to provide cost-effective and transparent medication benefit solutions to employers and health plans across the United States.

    Security Incidents

    Sav-Rx Breach of May 2024
    Severity Score
    Low to Moderate

    Type

    Unknown

    Summary

    On October 3, 2023, Sav-Rx, a prescription service company, experienced a cyberattack that compromised the personal data of over 2.8 million individuals. The breach involved unauthorized access to non-clinical systems, leading to the exfiltration of sensitive information such as full names, Social Security numbers, email addresses, phone numbers, dates of birth, street addresses, eligibility data, and insurance identification numbers. Although the company quickly restored its IT systems by the next day, they did not notify affected individuals until eight months later to prioritize minimizing ...
    Show more

    Severity

    The Sav-Rx cyberattack compromised sensitive personal data of over 2.8 million individuals, including Social Security numbers, addresses, and insurance information. The breach, discovered in October 2023, highlights significant vulnerabilities in non-clinical systems and delayed notification to affected individuals. This incident underscores the critical need for robust cybersecurity measures in the healthcare industry.

    Impact

    The Sav-Rx cyberattack affected over 2.8 million individuals whose personal information was compromised. Those impacted include patients and health plan participants whose data, such as full names, Social Security numbers, addresses, and insurance identification numbers, were exposed. The breach primarily involved non-clinical systems, leaving clinical data unaffected.