PharMerica Corporation

PharMerica Corporation reported that an unknown third party accessed its computer systems from March 12-13, 2023. The company discovered suspicious activity on March 14, 2023. Affected data included names, addresses, dates of birth, Social Security numbers, medications, and health insurance information. PharMerica engaged cybersecurity advisors and is offering one year of identity monitoring through Kroll.

PharMerica Corporation notified South Carolina residents of a cybersecurity incident where an unknown third party accessed systems from March 12-13, 2023. Discovered March 14, 2023, the breach exposed names, addresses, DOBs, SSNs, and health/insurance data. PharMerica engaged forensic advisors, enhanced security, and offered one year of Kroll identity monitoring.

PharMerica Corporation reported an external system breach (hacking) occurring March 12-13, 2023, discovered on March 21, 2023. The incident affected 5,815,591 individuals, including 40,248 in Maine. Personal information acquired included names and Social Security Numbers. PharMerica provided written notification and offered one year of credit and identity monitoring services through Kroll.

PharMerica Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-06-08. 384,938 Massachusetts residents were affected. The report records the breach type as electronic.

PharMerica notified affected individuals in Delaware and other states of a cybersecurity incident occurring March 12-13, 2023, discovered on March 14, 2023. An unknown third party accessed systems, obtaining names, addresses, DOBs, SSNs, medications, and health insurance info. PharMerica engaged cybersecurity advisors, enhanced technical security, and offered one year of Kroll identity monitoring.

PharMerica Corporation reported a data security incident to the New Hampshire Attorney General on June 8, 2023. An unknown third party accessed PharMerica's computer systems from March 12-13, 2023. The breach affected 17,451 New Hampshire residents, whose personal information was potentially obtained. PharMerica engaged cybersecurity experts, notified law enforcement, and offered complimentary credit monitoring and identity protection services to affected individuals.

PharMerica Corporation notified affected individuals in Montana and other states of a cybersecurity incident. Unauthorized access occurred March 12-13, 2023. Data accessed included names, addresses, DOBs, SSNs, medications, and health insurance info. PharMerica engaged cybersecurity advisors, enhanced security measures, and offered one year of Kroll identity monitoring.

PharMerica Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-12. The breach occurred during 3/12/2023 - 3/13/2023. The breach was discovered on 3/21/2023. 5,815,591 individuals were affected. Notice was sent on 5/12/2023.

PharMerica Corporation reported to HHS on 2023-05-12 a Hacking/IT Incident affecting 5,815,591 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, DOB, SSNs, claims, and medications. Response included credit monitoring and enhanced safeguards.

Headquartered in Louisville, Kentucky, PharMerica is one of the largest and fastest-growing institutional pharmacy companies in the United States. Our premier pharmacy services, with more than 180 long-term care pharmacies in almost every state, have a national scope but a local approach.Revenue: $3BBrightSpring Health Services is the leading provider of complementary home- and community-based health services for complex populations in need of specialized and/or chronic care. We focus on providing quality outcomes, through best-in-class service and technology capabilities.Revenue: $5.4B

PHARMERICA CORPORATION filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-384). The register records the breach as discovered on March 13, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.