Migliaccio & Rathod LLP is currently investigating the internet-based Ravkoo Digital Pharmacy service for failing to safeguard sensitive patient information in a data breach that occurred in September of 2021. The data breach was caused by unauthorized access to the pharmacy’s Amazon Web Services hosted prescription portal, which allowed the hacker to access the pharmacy’s systems using a hidden administrator panel that any user could have used to view the website’s confidential data. Examples of the types of data exposed in the leaks include names, dates of birth, addresses, medical records, lab results, diagnoses, medications, health insurance information, and the dates of services of over $8.5 million of the website’s drug transactions.
Cybercriminals can use the information obtained from pharmacy services for a number of fraudulent purposes. In previous pharmaceutical data breaches, individuals have had to pay out of pocket for credit monitoring or for new fraudulent charges related to information that was provided to the pharmaceutical company through healthcare providers or other medication orders. Individuals may have noticed suspicious credit or banking activity, disrupted medical care, or medical appointments fraudulently created, canceled, and/or billed in their name.
Are you or have you been a Ravkoo Pharmacy customer who has received a data breach notification letter in the past year?
If so, we would like to hear from you. Please complete the contact form on this page, send us an email at [email protected], or give us a call at (202) 470-3520.
The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches. More information about our current cases and investigations is available on our blog.