CVS Specialty
Disclosed Feb 10, 20233 years ago740 affectedConfirmed
The covered entity (CE), CVS Specialty, reported that it was the subject of a cyber-attack that affected the protected health information (PHI) of 740 individuals. The type of PHI involved included names and medications. The CE notified HHS, affected individual, and the media. In response to the breach, the CE implemented additional technical and security safeguards and retrained workforce members to better protect its PHI.
What is known
| People affected | 740 (as reported to HHS) |
|---|---|
| Disclosed | Feb 10, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): CVS Specialty (Healthcare Provider, RI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Feb 10, 2023 | 740 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.