We rank vendors based on rigorous testing and research, but also take into account your feedback and our commercial agreements with providers. This page contains affiliate links.
Professional Reviews

vpnMentor contains reviews that are written by our community reviewers. These take into consideration the reviewers’ independent and professional examination of the products/services.


vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, ZenMate, Private Internet Access, and Intego, which may be reviewed on this website.

Affiliate Commissions Advertising

vpnMentor contains reviews that follow the strict reviewing standards, including ethical standards, that we have adopted. Such standards require that each review will take into consideration the independent, honest and professional examination of the reviewer. That being said, we may earn a commission when a user completes an action using our links, at no additional cost to them. On listicle pages, we rank vendors based on a system that prioritizes the reviewer’s examination of each service, but also considers feedback received from our readers and our commercial agreements with providers.

Reviews Guidelines

The reviews published on vpnMentor are written by community reviewers that examine the products according to our strict reviewing standards. Such standards ensure that each review prioritizes the independent, professional and honest examination of the reviewer, and takes into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings we publish may also take into consideration the affiliate commissions we earn for purchases through links on our website.

Janssen Discloses Data Breach Impacting CarePath Users

Janssen Discloses Data Breach Impacting CarePath Users
Zane Kennedy Published on 12th September 2023 Cybersecurity Researcher

Johnson & Johnson Health Care Systems, also known as Janssen, has revealed a data breach that exposed sensitive information of its CarePath users. The breach stemmed from vulnerabilities in the infrastructure managed by its technology service provider, International Business Machines Corporation (IBM).

Upon discovering a method in which one could gain unauthorized access to the CarePath database, Janssen wasted no time alerting IBM. The latter took swift measures to close the security loophole and initiated an investigation to gauge the extent of the breach. The investigation, finalized on August 2, confirmed unauthorized access. However, the depth of this breach, including how many users were compromised, remains uncertain.

The investigation revealed that the data breach potentially exposed users' full names, contact details, birth dates, health insurance specifics, medication, and related medical conditions. However, Janssen confirmed that social security numbers and financial details were not compromised.

This incident only impacted those who were enrolled in the service prior to July 2, 2023. Janssen’s Pulmonary Hypertension patients were also unaffected.

The CarePath platform is a critical tool for many. It assists patients in accessing Janssen medications, provides valuable insights into insurance coverage, offers medication refilling alerts, and helps users save on prescription costs.

Given the nature of data available on the platform, this breach is all the more concerning. While medical data can be a lucrative asset in the darknet markets, it also makes victims susceptible to sophisticated phishing and social engineering attacks.

Although IBM's investigations have not yet indicated misuse of the compromised data, the tech conglomerate isn't taking chances — it’s extending a complimentary one-year credit monitoring service to all individuals potentially impacted by the breach. CarePath users are also strongly urged to maintain heightened vigilance, especially in monitoring account statements for any unauthorized and suspicious activities.

While IBM has already faced cybersecurity challenges this year, with breaches attributed to vulnerabilities in the MOVEit software used by IBM, their official stance is that this incident stands separate and was orchestrated by different threat actors.

As this story develops, both Johnson & Johnson and IBM are expected to offer further clarity and guidance to affected users. For now, all CarePath users are advised to heed the recommendations provided.

About the Author

Zane is a Cybersecurity Researcher and Writer at vpnMentor. His extensive experience in the tech and cybersecurity industries provides readers with accurate and trustworthy news stories and articles. He aims to help individuals protect themselves through informative content and awareness of cybersecurity's crucial role in today's digital landscape.