Cyber Incident Victim: BioPlus Specialty Pharmacy Services
Date:
Oct 2021
Location:
United States of America
Summary
BioPlus Specialty Pharmacy Services experienced a network intrusion involving unauthorized access to its systems over a multi-week period, potentially compromising the personal and health information of all current and former patients. Exposed data included names, dates of birth, addresses, medical records, and Social Security numbers for a subset of individuals; the organization responded by offering affected individuals credit monitoring services and establishing a dedicated inquiry line. No evidence of malware or ransomware was identified in the breach.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
BioPlus Specialty Pharmacy Services, LLC experienced a network intrusion that permitted unauthorized access to its systems between October 25 and November 11, 2021. The specialty pharmacy provider detected the breach on November 11, 2021, though the specific method of intrusion remained undisclosed. No evidence of malware or ransomware involvement was identified in the incident. The compromised data included sensitive patient information such as names, dates of birth, addresses, and medical records, with Social Security numbers exposed for a subset of individuals. All current and former patients of BioPlus were considered potentially affected by the breach, indicating broad exposure of protected health information (PHI). The incident represented a significant compromise of personal and medical data, though the exact number of impacted individuals was not quantified in available disclosures.
In response to the breach, BioPlus implemented notification procedures by informing affected patients through undisclosed channels, likely consistent with standard HIPAA breach notification requirements. The company established a dedicated toll-free number to address patient inquiries regarding the incident. As a remedial measure, BioPlus offered credit monitoring services to all individuals whose data was exposed, a step aimed at mitigating potential financial fraud risks stemming from the compromised Social Security numbers and personal identifiers. The breach disclosure occurred contemporaneously with another unrelated healthcare sector incident involving Simon Eye Management, though no operational or investigative connection between the two events was indicated. BioPlus did not publicly disclose technical details regarding containment measures, forensic methodologies, or potential threat actor attribution in its initial notification.