● Patient data was hacked at Injured Workers Pharmacy in January 2021. According to Injured Workers Pharmacy, they have helped serve over 500,000 worker's compensation patients.
● The data breach affected over 75,000 IWP patients.
● Hackers gained access to personally identifiable information (
PII) including patient names and Social Security numbers.
● IWP did not discover the breach until May 2021, almost four months after it occurred. During this time, hackers may have continued to have access to patient
PII.
● IWP is accused of not notifying affected patients until February 2022, about a year after the initial breach. The company conducted a seven-month investigation before alerting patients.