Data Breach Notice

NOTICE OF DATA SECURITY INCIDENT Apex Custom Software, Inc.

Date: March 29, 2025

Apex Custom Software, Inc. (“Apex”) is committed to protecting the security and confidentiality of the information entrusted to us. We are writing to inform you of a recent cybersecurity incident that may have affected certain data associated with our systems.

What Happened? On or around January 2025, Apex experienced a cybersecurity incident involving unauthorized access to our network by a threat actor. We promptly launched a thorough investigation with the assistance of third-party cybersecurity experts and notified law enforcement. The investigation determined that certain data was accessed without authorization during this incident.

We take this matter very seriously and have worked diligently to investigate the scope of the incident, secure our systems, and prevent similar occurrences in the future.

What Information Was Involved? The information potentially accessed may have included Rx Number for our Controlled Substance Inventory software. No other PHI was disclosed for individuals associated with our clients’ use of Apex software solutions. With just the RX Number and no other identifiers from the dispensing system, the risk of threat actor use of this information is extremely low.

We have no evidence of actual misuse of the information at this time, but we are providing this notice out of an abundance of caution so that you can take appropriate protective steps.

What Are We Doing?

• We took immediate steps to contain the incident, including isolating affected systems and enhancing our security controls.
• We engaged leading cybersecurity professionals to conduct a forensic investigation and implement additional safeguards, such as whitelisting IP addresses, multi-factor authentication enhancements, improved monitoring, encryption upgrades, etc.].
• We have cooperated fully with law enforcement authorities (FBI, HIPAA, etc.)
• We notified affected clients and worked closely with them to support any required notifications to end users or patients.
• We are reviewing and strengthening our overall information security program to further protect against future incidents.

Additional Resources For more information on protecting your personal information:

• Federal Trade Commission (FTC): www.identitytheft.gov or 1-877-438-4338
• Texas Attorney General’s Office: www.texasattorneygeneral.gov/consumer-protection

Apex regrets any concern this incident may cause. We value the trust placed in us by our clients and the healthcare community and remain dedicated to delivering secure, reliable custom software solutions.

This notice is provided pursuant to applicable state and federal laws, including Texas Business & Commerce Code requirements regarding breaches of system security involving sensitive personal information.

Sincerely,

Apex Custom Software, Inc.

2033 W. McDermott Dr. #320-219

Allen, TX 75013

 apexcustomsoftware.com

Contact: apexsupport@apexcustomsoftware.com