Injectable Therapy Services, Inc., operating as BioMatrix Specialty Pharmacy, recently reported a data breach to the Attorney General of California. On July 16, 2024, BioMatrix disclosed that an unauthorized party had gained access to its computer network. This breach compromised a range of sensitive personal information including names, addresses, email addresses, dates of service, prescriptions, Social Security numbers, and driver’s license numbers. The company has since been issuing data breach notification letters to affected individuals.
The breach was initially detected on December 13, 2023, but it was found that the unauthorized access occurred earlier on December 8, 2023. BioMatrix acted swiftly by blocking unauthorized access, securing its systems, and alerting law enforcement. A thorough investigation was conducted with the help of third-party cybersecurity experts to understand the extent of the breach and the nature of the exposed data.
Through their investigation, BioMatrix confirmed that the compromised data included personal and medical information of individuals. The company reviewed the affected files to identify exactly which information was leaked and to determine the list of impacted individuals. Despite the sensitive nature of the data involved, BioMatrix’s actions were focused on securing their systems and minimizing further risks.
As part of their response, BioMatrix sent out detailed breach notification letters to the individuals whose information was compromised. These letters provided information on the types of data exposed and included instructions for monitoring and protecting personal information. BioMatrix, a specialty pharmacy based in Van Nuys, California, continues to address the breach’s impact and is committed to enhancing its security measures.
Reference: