Ravkoo

Ravkoo operates as an online pharmacy service provider based in the United States. Its core offering involves facilitating prescription services through a digital platform hosted on Amazon Web Services (AWS). This portal enables customers to manage and potentially order prescription medications remotely. The primary market served appears to be consumers within the United States seeking the convenience of online pharmaceutical access. The service handles sensitive personal and health information as part of its prescription management operations.

A significant cybersecurity incident occurred on September 27, 2021, impacting Ravkoo's AWS-hosted prescription portal. An unauthorized party exploited a critical vulnerability involving a hidden administrative panel that was improperly accessible to any user, bypassing intended security controls. This breach potentially compromised the personal and health information of approximately 105,000 individuals and reportedly exposed details of around 340,000 prescriptions. Forensic investigation found no evidence that Social Security Numbers were accessed or that the compromised data was subsequently misused. The company responded by engaging external forensic investigators, notifying federal law enforcement agencies, and offering identity monitoring services to affected customers. Public claims by a hacker aligned with the incident details, describing the breach method as exceptionally straightforward, highlighting a severe security lapse.