Notice of Data Security Incident

Arkadelphia, Arkansas – April 12, 2024 – AllCare Pharmacy notified certain individuals that their personal information may have been accessed as part of cybersecurity incident. AllCare takes the privacy and security of information in its possession very seriously and sincerely apologizes for any inconvenience this incident may cause. This notice is intended to alert potentially impacted individuals of the incident, steps we are taking in response, and resources available to assist and protect individuals.

What Happened And What Information Was Involved On September 21, 2023, AllCare detected and stopped a cybersecurity incident, in which an unauthorized third party accessed a limited portion of AllCare’s network environment. AllCare immediately engaged a third party forensic firm to assist with securing the network environment and investigating the extent of any unauthorized activity.

AllCare’s investigation, which concluded on April 3, 2024, indicates that files containing certain individual and health information may have been accessed by an unauthorized third party. The information within the files may include: name, address, date of birth, prescription, Social Security number, and credit card number. Notably, the types of information affected were different for each individual, and not every individual had all of the above listed elements exposed.

AllCare is providing written notice to all impacted individuals. AllCare has no reason to believe that any individual’s information has been misused as a result of this event. As of this writing, AllCare has not received any reports of misuse of information and/or related identity theft.

What We Are Doing Data security is one of our highest priorities. Upon detecting this incident we moved quickly to initiate a response, which included conducting an investigation with the assistance of IT specialists and confirming the security of our network environment. We have also reviewed and enhanced our technical safeguards to prevent a similar incident.

The notification letter to the potentially impacted individuals includes steps that they can take to protect their information. In order to address any concerns and mitigate any exposure or risk of harm following this incident, AllCare has arranged for complimentary credit monitoring services and identity theft protection services to all potentially impacted individuals at no cost to them for a period of twelve months. AllCare recommends that individuals enroll in the services provided and follow the recommendations contained within the notification letter to ensure their information is protected.

For More Information For individuals seeking more information or questions about this incident, please call AllCare’s dedicated toll-free helpline at 1-833-919-9482 on Monday through Friday between 6:00 am to 6:00 pm ET, excluding holidays.

AllCare sincerely apologizes for any inconvenience this incident may cause to members of its community and remains dedicated to maintaining the security and protection of all patient information in its control.