Vascepa

Summary

Researchers from vpnMentor discovered an unsecured and unencrypted database containing over 390,000 Vascepa prescriptions for 78,000 patients. Exposed patient data included full names, addresses, cell phone numbers, email addresses, and prescription transaction information. The leaked health data may fall under information covered by the HIPAA Privacy Rule and could result in fines and pursuance of civil litigation. All of the prescription records were tagged as originating form PSKW, the legal name for ConnectiveRx; however, at the time of this writing, the database owner has not been found. More information about this breach can be found in the vpnMentor blog post.