A sunday two-fer on health data breaches: WellDyneRx, LLC (“WellDyne”) issued a press outlet on May 6 concerning an incident they first detected on december 2. The Florida-headquartered pharmacy benefits service provider’s investigation discovered that there was unauthorized access to an email account between October 30, 2021, and november 11, 2021. “Although there is no evidence that individually-identifiable info contained within the email account was accessed or taken by an unauthorized party, WellDyne cannot rein out this possibility,” they write, disclosing that the types of data may variegate by individual but might include name, appointment of birth, Social Security number, driver’s licence number, treatment information, health insurance information, middleman information, prescription information, and other medical/health information. Read their full press free at Yahoo! North Alabama bone & joint Clinic, P.C. (NABJC) also issued a press release about an incident impacting patient data. On march 9, 2022, they became aware of suspicious activity in the network. While the investigation is allay ongoing, they have already confirmed that some employee email accounts had been accessed without authorization on march 9. At this point they have not sent any notification letters but will be sending letters once they figure out who may hold potentially been affected. They describe that they anticipate that the types of information will vary by individual but may include name, touch information, financial information, date of birth, family information, medical record number, prescription information, medical and/or clinical info including diagnosis and handling history, and health indemnity information. Read their preliminary note (pdf).