Pharmacy Extortionists Take on CIA, DoD, FBI, NSA

By Brian Krebs
Wash. Post/Security Fix Section
November 24, 2008

Extortionists targeting clients of Express Scripts -- one of the nation's largest pharmacy benefits management firms -- may have inadvertently picked a fight for which they were ill-prepared. Security Fix has learned that among the company's biggest customers is the federal government, and specifically almost every federal law enforcement, military and intelligence agency in the country.

Last month, St. Louis-based Express Scripts said extortionists are threatening to disclose personal and medical information about millions of Americans if the company fails to meet payment demands.

Express Scripts is the third-largest U.S. pharmacy benefit management firm, which processes and pays prescription drug claims. Working with more than 1,600 companies, it handles roughly 500 million prescriptions a year for about 50 million Americans. ...

According to the 2009 Association Benefit Plan, a fee-for-service plan for civilian active and retired employees of the following organizations and one of several plans available through the Federal Employees Health Benefits Program, employees at a laundry list of three-letter agencies are Express Scripts customers. They include:

Office of the Director of National Intelligence (ODNI)
Central Intelligence Agency (CIA)
Defense Intelligence Agency (DIA)
Department of Defense (DOD)
Department of Energy, Office of Intelligence and Counterintelligence
Department of Homeland Security, Office of Intelligence and Analysis
Department of Treasury, Office of Intelligence and Analysis
Drug Enforcement Administration, Intelligence Division
Federal Bureau of Investigation (FBI)
National Geospatial Intelligence Agency (NGA)
National Reconnaissance Office (NRO)
Office of Naval Intelligence
State Department
U.S. Air Force, Office of Intelligence and Air Intelligence Agency
U.S. Army, Office of Intelligence and Security Command
U.S. Coast Guard, Office of Intelligence and Criminal Investigations
U.S. Marine Corps, Office of Intelligence and Marine Intelligence Activity

The Association Benefit Plan is administered by Coventry Health Care of Gastonia, N.C., which acquired the plan when it bought out Mutual of Omaha's health plan coverage in April 2007.

http://voices.washingtonpost.com/securityfix/2008/11/pharmacy_extortionists_take_on.html?nav=rss_blog

Little wonder that Express Scripts is now offering a $1 million reward for information leading to the arrest and conviction of anyone who may be responsible for these attacks: Employees of the agency investigating the attack may be the target of this ongoing threat.

I shudder to think how much damage a creative criminal could do armed with the Social Security numbers and other sensitive information belonging to the nation's top intelligence officials.