We are writing to inform you that Heartland Healthcare Services, LLC, including Heartland Pharmacy of Pennsylvania, Heartland Pharmacy of Maryland and Heartland Pharmacy of Illinois (“Heartland”) was recently the target of a ransomware (malicious software) attack. Because of this incident, some of your personal information may have been exposed. This letter describes the incident and the steps we have taken.

On April 11, 2022, Heartland learned of the ransomware attack when it received a ransom demand. Heartland immediately contacted the Federal Bureau of Investigation (“FBI”). The FBI conducted an investigation into the incident. Heartland consulted with the FBI regarding paying the ransom. Ultimately, Heartland did not pay the ransom. We have since learned that the misappropriated files have appeared on the dark web.

The investigation determined that an unauthorized party gained access to certain drives within the Heartland system. Some of your personal information may have been involved, including:

• address
• phone number
• medication name
• other medication-related information

We are committed to safeguarding your sensitive personal information and have taken steps to strengthen the protective measures that were already in place. Heartland has engaged a forensic cybersecurity team to review all of Heartland’s systems and we are implementing steps designed to enhance security.

Click here for the contact information of the relevant reporting agencies.

We deeply regret that this has happened. Protecting your information is important to us. Please remain vigilant for incidents of fraud and identity theft. Should you suspect an incident of identity theft, we ask you report such incidents to local law enforcement or your Attorney General.

If you have questions about this incident, please contact us at 1-800-780-4954, or email us at hipaa@hhstol.com.