CVS Health is facing a lawsuit for revealing the HIV status of 6000 patients in Ohio, according to news reports.1-3

The complaint, which was filed March 21 in federal court in Ohio, claims that CVS mailed letters last year that showed the HIV status of participants in the state’s HIV drug assistance program (OhDAP) through the envelopes’ glassine window just above their name and address. Fiserv, the company that provided the envelopes, is also named on the complaint. Inside the envelopes were letters that included new benefits cards and information about a mail prescription program.

The companies are being sued by 3 unidentified plaintiffs who are seeking a class-action suit and a jury trial. One person described living in a small town where “everyone knows everyone” and said he had experienced significant distress from the disclosure.

Continue Reading

The 3 plaintiffs live in different counties in Ohio but are clients of OhDAP, which has had a contract with CVS since March 2017. Per terms of the contract, CVS provides the program’s clients with HIV medications and is responsible for communication regarding those medications.

Related Articles

According to the plaintiffs’ attorneys, CVS failed to disclose the breach of privacy data and did not contact the patients whose status was revealed in the envelopes.


  1. Clark M. CVS reveals HIV status of 6,000 customers, according to lawsuit: report. April 2 2018. Accessible at:
  2. Faul A. CVS Health unintentionally revealed HIV status of 6,000 customers: lawsuit. Accessible at:
  3. Hassan C. Lawsuit claims CVS unintentionally revealed HIV status of 6,000 customers. CNN. April 1 2018. Accessible at:

This article originally appeared on Clinical Advisor