Security News > 2022 > January > US online pharmacy Ravkoo links data breach to AWS portal incident

Ravkoo, a US Internet-based pharmacy service, has disclosed a data breach after the company's AWS hosted cloud prescription portal was involved in a security incident that may have led to personal and health information being accessed.

"Ravkoo utilizes AWS cloud services for online hosting of its prescription portal. On September 27, 2021, Ravkoo detected that this portal was the target of a cybersecurity attack," the pharmacy said in data breach notification letters sent to 105,000 affected customers on January 3.

Alpesh Patel, the online pharmacy's CEO, said in a public notification on Ravkoo's site that the incident was reported to the FBI. The company is assisting the federal law enforcement agency's ongoing investigation into the matter.

Ravkoo is yet to find any evidence that any of the information exposed in the incident has been misused since it hasn't received reports of identity theft linked to this data breach since September 27, the date of the incident.

The details of the incident Ravkoo shared with Attorney Generals' offices from multiple states and affected customers line up with a report from The Intercept right after the incident took place saying that an anonymous hacker that Ravkoo was "Hilariously easy" to breach.

A Ravkoo spokesperson didn't reply to a request for comment when BleepingComputer reached out earlier today for additional details regarding the data breach.

News URL

https://www.bleepingcomputer.com/news/security/us-online-pharmacy-ravkoo-links-data-breach-to-aws-portal-incident/