Wednesday, November 27, 2024
-
Notice of Security Incident at Enclara Pharmacia
Roper St. Francis Healthcare takes the privacy of our patients’ information very seriously, and we work hard to maintain the confidentially of that information. Regrettably, this notice concerns an incident at one of our vendors that involved some of that information.
What Happened?
On October 2, 2024, Roper St. Francis learned of a security incident at Enclara Pharmacia, a business associate of Roper Hospice providing prescription medication services. On July 18, 2024, Enclara discovered an email phishing incident. It was determined that an email account, belonging to one Enclara employee, was accessed and exfiltrated by an unknown person. On September 18, 2024, Enclara identified the patients that may have had information accessed by the unauthorized person.
What Information Was Involved?
The information that may have been accessed included your first name, last name, patient identifier, medications, and health condition. No other personal, medical, or financial information was disclosed.
What We Are Doing
Enclara has policies and procedures in place to maintain the security of patient information and took additional steps including a review of policies and procedures applicable to this incident. Enclara immediately terminated the unauthorized access and changed the employee’s credentials. Enclara performed an internal forensic investigation to identify the root cause of the unauthorized access and hired a third-party firm to conduct an independent review of the data deemed impacted by this incident. Enclara strengthened their access controls and security policies in response to this incident. Also, additional awareness training toward phishing attacks was provided to all Enclara employees.
On November 25, 2024, notification letters were mailed to all patients whose information was involved.
What Patients Can Do
Although Enclara is unaware of any actual misuse of patient information, patients are being asked to remain vigilant. There are steps patients can take to protect themselves. We encourage you to review Explanation of Benefits (EOB) letters from your health insurance carrier and medical records for suspicious activity. If you have any questions or need additional information, you can contact Enclara at CustomerService@enclarapharmacia.com or by calling 800-325-3646, Monday through Friday, 9 a.m. — 4 p.m.