Crooks threaten to expose data on millions at benefits firm

Share this article:
Data thieves are threatening to expose the personal details of millions of patients of a major pharmacy benefit management firm unless the company pays up.

St. Louis-based Express Scripts said Thursday that it received an anonymous letter that included the names, Social Security numbers, birth dates and, in some cases, prescription information of 75 members. The writer or writers threatened to release millions of more records if the business failed to pay an unspecified sum of money.

The company, which received the letter in early October, has since notified the FBI and has launched its own investigation after contracting with data security and computer forensic experts. The organization also is notifying affected individuals.

In a statement, Express Scripts did not disclose whether it had suffered a major breach. It said it deploys a number of security solutions that prohibit intruder access to personal information.

"However, as security experts know, no data system is completely invulnerable," George Paz, chairman and CEO, said.

Blackmail threats of this type are unusual. As evidenced by the bust this summer of a major crime syndicate -- responsible for the TJX heist, among others -- data thieves typically prefer to use the information themselves or sell it on the criminal underground.

An FBI spokesperson could not be reached for comment. An Express Scripts spokesman did not immediately respond to a request for comment on Thursday evening EST.
Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Florida Supreme Court rules warrants a must for real-time cell location tracking

Florida Supreme Court rules warrants a must for ...

The Florida Supreme Court put the kibosh on warrantless real-time tracking using location data obtained from cell phone providers.

Modular malware for OS X includes backdoor, keylogger components

Modular malware for OS X includes backdoor, keylogger ...

The modular malware was named "Ventir," by researchers at Kaspersky.

Fake Dropbox login page nabs credentials, is hosted on Dropbox

Fake Dropbox login page nabs credentials, is hosted ...

Symantec researchers received a phishing email linking recipients to a fake Dropbox login page that is hosted on Dropbox's user content domain and served over SSL.