IBM is a service supplier to Johnson & Johnson Well being Care Methods, Inc. (“Janssen”). IBM manages the appliance and the third-party database that helps Janssen CarePath. Janssen just lately grew to become conscious of a technical methodology by which unauthorized entry to the database may very well be obtained. Janssen then instantly notified IBM, and, working with the database supplier, IBM promptly remediated the difficulty. IBM additionally undertook an investigation to evaluate whether or not there had been unauthorized entry to the database. Whereas IBM’s investigation recognized, on August 2, 2023, that there was unauthorized entry to private data within the database, the investigation was unable to find out the extent of that entry. Consequently, IBM has begun notifying Janssen CarePath prospects and customers whose data was contained within the Janssen CarePath database out of an abundance of warning.

The knowledge concerned on this incident might have included people’ names and a number of of the next: contact data, date of start, medical health insurance data, and details about drugs and related circumstances that have been offered to the Janssen CarePath software. Social Safety numbers and monetary account data weren’t contained within the database or affected.

After being knowledgeable of the difficulty by Janssen, IBM and the database supplier promptly recognized and applied steps that disabled the technical methodology at problem. IBM additionally labored with the database supplier to reinforce safety controls to cut back the possibility of the same occasion occurring sooner or later.

Whereas there is no such thing as a indication that any of the concerned data has been misused, complimentary one-year credit score monitoring service is being supplied to people whose data might have been concerned. People can organize for credit score monitoring by following the directions on the notification letters that they obtain or by calling the devoted name heart.

Janssen CarePath customers are inspired to stay vigilant by repeatedly reviewing their account statements and explanations of advantages from their well being insurer or care suppliers with respect to any unauthorized exercise, and to promptly report any suspicious exercise.

A toll-free heart for questions on this incident has been established. Questions and requests to enroll within the credit score monitoring service needs to be directed to the devoted name heart, Monday to Friday, 9am to 9pm EST (excluding main U.S. holidays):

For healthcare suppliers: 877-792-3593

For particular person customers: 888-604-6584

This data can even be made obtainable on the Janssen CarePath webpage at www.janssencarepath.com.

IBM takes data safety critically and is dedicated to defending in opposition to evolving cyber threats.