DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Walgreen accused of selling patient data

Posted on March 11, 2011 by Dissent

This must be the month to sue major pharmaceutical chains for allegedly selling patient prescription information. First it was CVS. Now it’s Walgreen. Reuters Legal reports:

A lawsuit filed in California this week accuses national drug-store chain Walgreen Co of unlawfully selling medical information gleaned from patient prescriptions, another front in the battle over personal information.

Unlike suits that focus on patient privacy, the plaintiffs accuse Walgreen of depriving them of the commercial value of their own prescription information.

According to the suit, brought by Todd Murphy on behalf of his two daughters and the rest of the class, Walgreen sells the prescription information to data mining companies who resell it to pharmaceutical companies for marketing purposes.

Reuters reports on the unusual legal strategy:

Unlike suits that focus on patient privacy, the plaintiffs accuse Walgreen of depriving them of the commercial value of their own prescription information.

It’s an interesting legal approach, but given the lawyer’s track record on other lawsuits against pharmaceutical companies, I’m afraid to be optimistic:

Krinsk’s law firm, Finkelstein and Krinsk, has previously sued Walgreen in Florida state court for allegedly giving pharmaceutical companies access to prescription records. The judge granted Walgreen summary judgment last September, finding no proof that the company had released patient information.

Krinsk has also sued drug retailer Longs Drugs for violating California’s Confidentiality of Medical Information Act. He said the plaintiffs voluntarily dismissed that case after the judge ruled that the pharmacy’s practice of selling prescription information did not violate medical privacy and confidentiality laws.

The focus of the latest suit, filed on Tuesday, shifts from privacy to unlawful business practices. Without identifying individuals, Walgreen sells data that includes the patient’s sex, age group, state, the ID number of the prescribing doctor and the name of the drug.

Read more on PublicBroadcasting.net. Note that the allegations here are significantly different than the allegations in the lawsuit against CVS, where the plaintiffs allege that CVS used identified patient information to contact the patients’ physicians on behalf of paid sponsors to promote the sponsors’ medications.

Category: Health Data

Post navigation

← Identity data of Texas Children’s doctors used in scam (updated)
Bank detains customer after his account was used for N3m fraud →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Almost one year later, U.S. Dermatology Partners is still not being very transparent about their 2024 breach
  • Oklahoma Expands its Security Breach Notification Law
  • Ransomware group Gunra claims to have exfiltrated 450 million patient records from American Hospital Dubai.
  • North Shore University Sleep Disorders Center employee charged with secretly recording patients in restrooms
  • When ransomware listings create confusion as to who the victim was
  • Rajkot civic body’s GIS website hit by cyber attack, over 400 GB data feared stolen
  • Taiwan’s BitoPro hit by NT$345 million cryptocurrency hack
  • Texas gastroenterology and surgical practice victim of ransomware attack
  • Romanian Citizen Pleads Guilty to ‘Swatting’ Numerous Members of Congress, Churches, and Former U.S. President
  • North Dakota Enacts Financial Data Security and Data Breach Notification Requirements

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Florida ban on kids using social media likely unconstitutional, judge rules
  • State Data Minimization Laws Spark Compliance Uncertainty
  • Supreme Court Agrees to Clarify Emergency Situations Where Police Don’t Need Warrant
  • Stewart Baker vs. Orin Kerr on “The Digital Fourth Amendment”
  • Fears Grow Over ICE’s Reach Into Schools
  • Resource: HoganLovells Asia-Pacific Data, Privacy and Cybersecurity Guide 2025
  • She Got an Abortion. So A Texas Cop Used 83,000 Cameras to Track Her Down.

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.