ARx Patient Solutions

ARx Patient Solutions, known by its alias, is a company headquartered in the United States of America. The organization focuses on delivering patient solutions that involve the management of personal and health‑related information. In the course of its operations, it processes data such as names, identifiers, medical details, and insurance information on behalf of individuals. This information is essential for supporting patient care, administrative functions, and coordination between healthcare stakeholders. Handling such sensitive data places the organization in a position where safeguarding confidentiality and integrity is a core responsibility.

On June 30, 2023, ARx Patient Solutions experienced a data breach after an unauthorized party accessed an employee’s Microsoft 365 email account. The breach exposed the personal information of 41,116 individuals whose data was stored in the compromised account. Exposed data elements included full names, Social Security numbers, medical details, and health insurance information. The incident demonstrated that the email account contained a repository of both identifying and clinical data for the affected individuals. Unauthorized access to this account allowed the attacker to view and potentially exfiltrate the sensitive information described above.

Upon discovering the breach, ARx Patient Solutions immediately disabled the compromised Microsoft 365 email account to stop further unauthorized access. The company then engaged external cybersecurity experts to conduct a thorough investigation into the scope and cause of the incident. The investigation aimed to determine what data had been accessed, assess any additional risks, and recommend appropriate remedial measures. After completing the investigation, ARx Patient Solutions notified all affected consumers about the exposure of their personal information. These actions reflect the organization’s response to contain the breach, investigate its origins, and inform those impacted.