Recent 'Security Breach'

Express Scripts Possible Data Breach

Wednesday, November 12th, 2008

When you give your personal information to a company, you assume it is safe, right? That isn’t always the case. Express Scripts, a pharmacy benefit manager, provides fills about 500 million prescriptions a year, with the TRICARE military program being its largest client. In October, the company received an anonymous letter that threatened the company with extortion. The letter said that if the requested monies were not received, the perpetrator would expose millions of personal client records on the Internet, which could lead to identity fraud.

To show that he or she was serious, the anonymous person included the names, social security numbers, addresses, dates of birth, and some prescription information of 75 Express Scripts clients. In addition to Express Scripts receiving the threatening letter, several clients also received a similar letter. The clients whose information was contained within the extortion letters have been notified.

Express Scripts notified the Federal Bureau of Investigations (FBI), which is currently looking into the case. The company has also started its own investigation, including professionals in the data security and computer forensics industry, to try to identify the culprit.

It is still unknown as to whether someone inside or outside the company stole the information, but the company is very serious about finding the individuals responsible for this crime. Express Scripts has offered a $1 million dollar reward to anyone who helps them catch the persons responsible for the threat.

Right now, it is believed that the only misuse of personal information was that of the clients listed in the extortion letters, although the company declined to say how many clients were actually involved. It has offered free identity restoration services to identity theft victims through Kroll, Inc. CEO George Paz said in a statement that the company wanted to assure clients that it had the company’s “constant support until their issues are resolved.”

If you are use Express Scripts and have concerns about your personal information, wish to learn more about how to protect your identity, or believe that your identity has been stolen, contact the company through their support web page ( Those having any information about the theft should contact the FBI at 1-800-CALL-FBI.