CVS Health is one of the defendants in a federal lawsuit claiming that it and other companies failed to protect the HIV status of 6,000 patients in Ohio—not through an online data breach, but thanks to a poorly constructed envelope. The suit filed by three unidentified plaintiffs maintains that when CVS mailed letters to patients in the state’s HIV drug assistance program last year, the recipients’ HIV status was visible in the envelope’s glassine window. …
Read More