Fri, November 14, 2008
Express Scripts Reports Loss of Confidential Information
Prescription processor Express Scripts recently reported that some of the confidential data that it maintains on millions of patients has been compromised. In October the company received an extortion letter from someone who possessed names, Social Security numbers, and prescription information for about 75 people. Some of Express Scripts’ clients (typically these are health benefit plans) received similar threats. The company has established a website to provide information about the data loss, although at present the site doesn't contain much real information. Express Scripts believes it has identified where the lost data was stored, but gives no indication that it has figured out how many people's information was stolen. As I’ve mentioned before, stolen medical data sells for a premium because it can be used to commit insurance fraud; medical data theft is potentially much more lucrative than credit card theft. This incident will bear close watching, especially if it turns out that a significant number of people's information was lost. Express Scripts says that it will provide free "identity restoration services" to individuals who become victims of identity theft as a result of this loss – so by the time help is provided, the damage will already be done.