MailMyPrescriptions.com Pharmacy
Disclosed Apr 8, 20215 years ago24,037 affectedConfirmed
The covered entity (CE), MailMyPrescriptions.com Pharmacy Corporation, reported that one of its employees was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 24,037 individuals. The ePHI involved included names, dates of birth, addresses, medications prescribed, diagnoses, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. The CE retrained its employees on recognizing and responding to fraudulent email communications and implemented additional administrative safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule.
What is known
| People affected | 24,037 (as reported by the organization) |
|---|---|
| Disclosed | Apr 8, 2021 |
| Discovered | Feb 17, 2021 |
| Happened | Feb 3, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: MailMyPrescriptions.com Pharmacyoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: MailMyPrescriptions.com Pharmacyjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: MailMyPrescriptions.com Pharmacyin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): MailMyPrescriptions.com Pharmacy (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 8, 2021 | |
| Oregon DOJresidents of OR | Apr 8, 2021 | 24,037 |
| Indiana AGresidents of IN | Apr 8, 2021 | 566 |
| HHS archivetotal | Apr 16, 2021 | 24,037 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), MailMyPrescriptions.com Pharmacy Corporation, reported that one of its employees was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 24,037 individuals. The · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 24037 · backfill source
- 2026-09-25 · discovered: empty to 2021-02-17 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.