Johnson & Johnson Patients Affected by IBM Data Breach

Johnson & Johnson has disclosed that a data breach at IBM, its technology service provider, has impacted patients who use the Janssen CarePath patient support platform. The breach may have involved unauthorized access to personal information, including full names, birthdates, contact details, health insurance information, medical condition data, and medication details.

Johnson & Johnson Discloses IBM Data Breach Impacting Patients

IBM has not disclosed the number of individuals impacted by the breach, but Janssen says that approximately 1.16 million patients in the US were helped through the CarePath program in 2022. IBM has fixed the security vulnerability that was exploited in the breach, and there is no evidence that the exposed information has been misused. However, Janssen CarePath users are advised to monitor their account statements for suspicious activity. IBM is offering one year of free credit monitoring services to people affected by the breach.

This data breach is another reminder of the importance of cybersecurity for healthcare organizations. Healthcare data is a valuable target for cybercriminals, and organizations must take steps to protect it.

Here are some tips for healthcare organizations to improve their cybersecurity posture:

Implement strong access controls and authentication measures.
Regularly update software and patch security vulnerabilities.
Conduct regular security awareness training for employees.
Use a layered security approach, including firewalls, intrusion detection systems, and data encryption.

Patients can also take steps to protect their own privacy and security:

Be careful about what information you share online.
Use strong passwords and enable multi-factor authentication on all the accounts.
Monitor your credit report and financial statements regularly for suspicious activity.

If you are a Janssen CarePath user, learn more about the data breach and how to protect yourself at the following website: https://www.janssencarepath.com/notice-of-data-incident