Chaos on Capitol Hill as lawmakers hit with alarming hack

Members of Congress could have key medical information exposed as a result of a breach, Politico reported on Wednesday.

"Lawmakers on Capitol Hill were informed this week of a data breach involving the congressional medical office that may have compromised personal information — including their prescription history," said the report. "The intrusions occurred March 1 and 3 and targeted RXNT, a medical software provider used by the Office of the Attending Physician to manage care for members of Congress, according to letters sent this week to affected individuals that were reviewed by POLITICO."

"Brian Monahan, the Capitol’s attending physician, is making personal calls to staff and lawmakers whose data are affected, according to one person contacted by phone this week and alerted that their prescription history was among those breached," said the report. "RXNT’s software is intended to 'securely transmit prescription information to pharmacies for fulfillment,' Monahan’s office explained in the letters to patients."

In addition to prescription information, RXNT includes "names, birthdays, addresses ... doctor information and pharmacy information," the report continued. However, broader patient records, as well as financial and insurance information and Social Security numbers, were not included.

The perpetrators of the breach, or even whether they are foreign or domestic, have not been disclosed.

"The Office of the Attending Physician operates several small medical clinics on the Capitol campus where Navy medical personnel handle both emergencies and primary health care for lawmakers, while also providing vaccinations and minor medical services for congressional aides," noted the report. "Staff are able to procure prescriptions through the OAP in limited circumstances, including for official travel and follow-up care."

Data breaches have become a frequent reality that threatens the security of Americans, with one of the most famous incidents being the Equifax breach of 2017, which exposed sensitive data like Social Security numbers for up to half of all Americans. The perpetrator of that breach was never conclusively identified.