The Everest Pharmacy Data breach appears to be another simple and avoidable error that has led to a breach of private information.
In this incident, the names of people were accidentally published on the pharmacy’s website. As well as the names, there was also a code and a date. We can only assume that the information related to prescriptions for people, which is personal medical information.
It has not yet been confirmed as to how the breach occurred. The breach involved the Darwen town pharmacy branch in Lancashire.
About the Everest Pharmacy data breach
The Everest Pharmacy data breach is said to have affected at least 19 individuals. The breach incident occurred when the pharmacy somehow published names on their website, together with dates and codes.
It’s speculated that the names may have been users of the pharmacy.
In a statement, the pharmacy chain said: “As soon as we were made aware of this, we suspended the website immediately.”
The matter has been referred to the ICO (Information Commissioner’s Office). They said: “We are aware of an incident involving Everest Pharmacy and we will assess the information provided against data protection laws, before deciding whether or not to investigate.”
People “horrified” over Everest Pharmacy data breach
Some people are said to reportedly be “horrified” at learning of the Everest Pharmacy data breach.
Depending on the completion of the ICO’s investigations, a heavy fine could be levied over the breach. If this was another case of an accidental breach of information that was entirely preventbale, the ICO may demand data compliance improvements from the pharmacy chain. This could be in addition to any fine levied.
The pharmacy should ensure that all victims of the breach are contacted as soon as possible.
Claiming compensation for medical data breaches
Victims of a medical data breach can be eligible to claim compensation. In a situation where data is accidentally published like we saw in the Everest Pharmacy data breach, victims may have a case.
Whether a person can claim or not can often come down to the severity of the data that has been breached. Medical data is generally seen as a severe breach given that medical data is often personal and very sensitive.