Amarin became aware of media reports suggesting that a database containing information about consumers who use or have expressed interest in Vascepa have been subject to unauthorized access. Amarin promptly began investigating these reports and determined that the database in question was maintained by the vendor. The vendor informed them that due to a database misconfiguration, information could have been accessed without proper authorization. Information in the database subject to unauthorized access and acquisition included names, postal and email addresses, phone numbers, and information about consumers’ use of certain supplements or medications, including Vascepa. The vendor confirmed the database did not contain Social Security numbers or financial account information.

On August 5, 2019, the California Office of the Attorney General reported a data breach involving Amarin Pharma, Inc. The breach, which was identified on June 20, 2019, involved unauthorized access to a vendor's database containing names, postal and email addresses, and phone numbers related to consumer use of Vascepa®. The number of individuals affected is unknown.