HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
PharMerica Corporation
bd_e9b259e070676bf3 · schema v1 · pii pii-v1
Full breach record for PharMerica Corporation →PharMerica Corporation reported an external system breach (hacking) occurring March 12-13, 2023, discovered on March 21, 2023. The incident affected 5,815,591 individuals, including 40,248 in Maine. Personal information acquired included names and Social Security Numbers. PharMerica provided written notification and offered one year of credit and identity monitoring services through Kroll.
Maine clockDiscovered Mar 21, 2023 → Filed with AG Jun 9, 202380d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by moneymessage about this victim predates this filing by 61 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_a43e9112bb1c5c48Delaware State AGfiled 2023-06-08(1d gap)Verified
- bd_b8a2948fa31c71f6Delaware State AGfiled 2023-06-08(1d gap)Verified
- bd_daca18683c969f62Montana State AGfiled 2023-06-08(1d gap)Verified
- bd_c2b1450efa997e5bCalifornia State AGfiled 2023-06-19(10d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 28d gap
- bd_226e2c119c013671Oregon State AGfiled 2023-05-12(28d gap)Candidate
- bd_64333830485a7e13HHS OCRfiled 2023-05-12(28d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/08d6080b-afcf-4d02-ba20-24f639aaca61.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 9, 2023
- Raw hash
- 196fec56892e59b480f552c74d1aaa960b5f489caa66dc3b7ab77ace66bcce5a
Reporting entity
- Name
- PharMerica Corporationnorm: pharmerica
- Domain
- pharmerica.com
Victim entity
- Name
- PharMerica Corporationnorm: pharmerica
- Domain
- pharmerica.com
Incident
- Discovered
- Mar 21, 2023
- Materiality determined
- —
- Notification sent
- Jun 8, 2023
- Affected individuals
- 5,815,591
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(80 days from discovery to filing)
- Compliance flags
- ME AG >30d · 80dME resident >60d · 79dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2023→ Filed with AG: Jun 9, 202380d 30 days (soft) ME AG >30d Maine Discovered: Mar 21, 2023→ Notified: Jun 8, 202379d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.