BioPlus Specialty Pharmacy Services
Disclosed Dec 10, 20214 years ago348,870 affectedConfirmed
The covered entity (CE), BioPlus Specialty Pharmacy Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 348,870 patients. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses, medication prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its PHI.
What is known
| People affected | 348,870 (as reported to HHS) |
|---|---|
| Disclosed | Dec 10, 2021 |
| Discovered | Nov 11, 2021 |
| Happened | Oct 25, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: BioPlus Specialty Pharmacy Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: BioPlus Specialty Pharmacy Servicesatg.wa.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: BioPlus Specialty Pharmacy Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): BioPlus Specialty Pharmacy Services (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 10, 2021 | |
| Washington AGresidents of WA | Dec 10, 2021 | 13,357 |
| Indiana AGresidents of IN | Dec 10, 2021 | 1 |
| HHS archivetotal | Dec 10, 2021 | 348,870 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 1335 to 348870 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), BioPlus Specialty Pharmacy Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 348,870 patients. The PHI involved included names, dates of birth, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1335 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2021-11-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.