The Kroger chain notified pharmacy and Little Clinic customers of data security breaches in which the patient’s name and personal information was illegally accessed.
According to a press release from the company, Kroger was notified of the vulnerability on January 23, but it did not affect Kroger’s supermarket data or IT data. The company has set up a website at https://www.kroger.com/i/accellion-incident to obtain information about the violation.
The Cincinnati-based supermarket chain offers free credit monitoring to anyone affected by a data breach.
Information accessed included the following data:
- Patient names.
- Email addresses.
- Phone numbers.
- Home addresses.
- Dates of birth.
- Social Security numbers.
- Information used to process insurance claims.
- Prescription information such as number, prescribing doctor, medication names and dates, medical history, as well as certain clinical services, such as whether the patient was ordered a flu test.
Kroger said unauthorized people could gain access to the software company Accellion that Kroger used to transfer files securely.
According to the press release, unidentified individuals have gained access to the Kroger files by exploiting vulnerabilities in the casting service.
After learning of the accident, Kroger stopped using Accellion’s services.
The grocery company conducted a criminal investigation into the possible scope and impact of the data breach.
Kroger said the accident affected beneficiaries of the “Health and Care Allowance Program” and “Health and Care for Retirees.”
Kroger is in contact with potentially affected customers.
A data breach could affect Little Clinic and Kroger pharmacies, as well as Ralphs Grocery and Fred Meyer Stores pharmacies.
Related pharmacies that may be affected include Jay C Food Store, Dillon Company, Baker, Urban Market, Gerbes, King Soopers, Quality Food Center, Roundy Supermarket, Copps Food Center, Mariano’s Metropolitan Market, and Pick N Save, Harris Teeter, Smith’s Food and Drug Kroger, Fry Grocery Store, Healthy Options, Prescription Services, and Specialty Pharmacy Stock.