CVS Health statement on missing or destroyed patient information following local store vandalism

07.28.20

Updated as of 9.25.20

Woonsocket, Rhode Island — CVS Health issued the following statement regarding patient information that was missing or destroyed as the result of vandalism that occurred at several CVS Pharmacy stores between May 27th and August 24th.

After conducting a review of the impacted stores, on both July 8 and September 10, 2020, we discovered that, as a result of the vandalism, certain hard copy (paper) prescriptions and vaccine consent forms stored at the pharmacy in some stores, and prescriptions held in the waiting bins behind the pharmacy counters, were missing or destroyed.

CVS Health sent a notice to the impacted patients. The information which may have been disclosed as a result of the vandalism included name, date of birth, address, telephone number, medication name, prescriber information, and medical screening information. No social security numbers, credit card, debit card or bank account numbers were impacted. We have no evidence of the patient information being misused.

Following the vandalism, our primary goal was to reduce the possibility of harm to our patients and to make sure that we could continue to provide patients with their medications. As needed, we filled and/or transferred prescriptions impacted by this incident.

CVS Health places the highest priority on protecting the privacy of its patients. The privacy and security of their information is very important to us and we take significant measures to protect it from unauthorized uses and disclosures.

Although the circumstances surrounding this incident were beyond our control, we are in the process of considering whether additional safeguards are necessary to further enhance protection of our patients’ personal health information.”
Patients who have questions may contact us toll-free at 1-800-746-7287.