Direct Scripts
Disclosed Feb 22, 20197 years ago9,319 affectedConfirmed
Direct Scripts, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 9,319 individuals. The PHI involved included names, addresses, and prescription information. The CE notified HHS, affected individuals, the media, and posted substitute notice. The entity is no longer in business.
What is known
| People affected | 9,319 (as reported by the organization) |
|---|---|
| Disclosed | Feb 22, 2019 |
| Discovered | Jan 30, 2019 |
| Happened | Jan 30, 2019 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2019 data breach report: Direct Scriptsin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Direct Scriptsmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Direct Scripts (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 22, 2019 | 15 |
| Maine AGresidents of ME | Feb 22, 2019 | 433 |
| HHS archivetotal | Mar 6, 2019 | 9,319 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Direct Scripts, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 9,319 individuals. The PHI involved included names, addresses, and prescription information · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · discovered: empty to 2019-01-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.