Purdue University Pharmacy

Purdue University Pharmacy operates as a pharmacy service provider that also runs an affiliated Family Health Clinic, delivering prescription medications, over‑the‑counter products, and basic medical care to students, faculty, staff, and members of the surrounding community associated with Purdue University. The pharmacy fills prescriptions issued by university health services and external providers, while the clinic offers routine examinations, vaccinations, and treatment for minor illnesses and injuries. In carrying out these functions, the organization routinely collects, stores, and processes protected health information such as patient names, identification numbers, dates of birth, medication histories, diagnoses, treatment details, and billing data. This handling of sensitive health data places the pharmacy and clinic within the scope of federal healthcare privacy regulations that govern the protection of personal health information. The organization’s primary market is the Purdue University campus population, though it may also serve local residents who seek its pharmacy and clinic services.

In September 2017, Purdue University Pharmacy and its Family Health Clinic experienced a security breach in which unauthorized access and malware were discovered on certain systems, potentially exposing a wide range of patient information including names, identification numbers, dates of birth, medication details, diagnoses, treatment records, billing amounts, health insurance data, driver’s license numbers, and Medicare identifiers. Although investigators found no concrete evidence that the data had been accessed or exfiltrated, the organization could not rule out the possibility and therefore notified affected individuals, offering credit monitoring services to those whose driver’s license or Medicare information might have been compromised. Following the incident, the pharmacy and clinic implemented a series of enhanced security measures, including full drive encryption of devices, network segmentation to isolate critical systems, and improved monitoring protocols to detect and respond to future threats more effectively. These actions reflect the organization’s commitment to safeguarding the health information entrusted to it by its university‑affiliated patient base. The pharmacy and clinic remain affiliated with Purdue University, operating under the university’s broader administrative and support structure while maintaining their distinct pharmacy and clinical service functions.