Malware cause of breach at Ohio medical supply firm

Edgepark Medical Supplies, an Ohio-based medical supplier, is notifying approximately 4,200 customers that their protected health information is at risk.

Edgemark learned on Dec. 12, 2013, that unauthorized users accessed its servers between March 9 and March 12, 2013. “Unfortunately, our anti-virus software provider did not identify this particular malware issue until shortly before we were notified of the incident,” according to the company.

The following information was compromised: name, date of birth, phone number, shipping and billing addresses, last four digits of credit card numbers for most affected customers, credit card issuer and expiration date, Edgepark account number, primary physician, diagnosis, order history and insurer.

The company said there is no sign that the information has been misused; however, it is offering affected customers one year of identity protection.