Ravkoo, a US-based internet-based pharmacy service, has disclosed a data breach after the company's AWS-hosted cloud prescription portal was involved in a security incident that may have led to access to personal and health information.
See also: FlexBooker: Data breach affects over 3.7 million accounts
The company said it found no evidence that customers' Social Security Numbers were accessed during the incident, adding that it does not store SSN data on the affected prescription portal.
Alpesh Patel, CEO of the online pharmacy, said in a public notice on Ravkoo's website that the incident was reported to the FBI. The company is assisting the federal law enforcement agency's ongoing investigation into the matter.
See also: Have I Been Pwned: DatPiff warns of data breach of millions of members
Ravkoo has not yet found evidence that any of the information exposed in the incident has been used, as it has not received any reports of identity theft linked to this data breach since September 27, the date of the incident.
Affected individuals are being provided with a free one-year online identity monitoring service from Kroll Information Assurance to enable them to resolve identity theft issues associated with this data breach.
Details of the incident that Ravkoo shared with attorney generals' offices in multiple states and affected customers were reported in a report by The Intercept shortly after the incident. An anonymous hacker said that Ravkoo was "hilariously easy" to hack.
See also: Broward Health: Data breach affects 1.3 million people
The alleged hacker claimed that he was able to gain access to Ravkoo's systems using a hidden admin panel that any user could use to view all data.
Information source: bleepingcomputer.com
