Express Scripts, Inc.

Berkeley Research Group (BRG), a third-party vendor for Express Scripts, experienced a data breach from Feb 28 to Mar 2, 2025. An unauthorized actor accessed BRG systems and copied personal information of Express Scripts clients. BRG contained the incident, rotated credentials, and rebuilt systems. Affected individuals received 24 months of credit monitoring via Kroll. Federal law enforcement was notified.

EXPRESS SCRIPTS filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-081). The register records the breach as discovered on April 30, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

EXPRESS SCRIPTS, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-003). The register records the breach as discovered on April 30, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

EXPRESS SCRIPTS, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-089). The register records the breach as discovered on April 30, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Express Scripts notified Montana members of unauthorized access to their mobile app accounts between April 30 and May 3, 2022. The attacker used stolen credentials from a third-party breach. Prescription history was accessed. Express Scripts locked accounts and offered Equifax identity theft protection.

Express Scripts, Inc. reported a cybersecurity incident involving unauthorized access to its mobile application. Between April 30 and May 3, 2022, a bad actor used stolen credentials (user ID and password obtained from another breach) to access member accounts. The actor may have viewed prescription history for the last 24 months, including names, medication details, and pharmacy information. No financial data or SSNs were compromised. Express Scripts locked affected accounts and required password resets, and offered free identity theft protection via Equifax.

Express Scripts notified Montana members of unauthorized access to their Express Scripts mobile application accounts between April 30 and May 3, 2022. The attacker used credentials obtained from a separate breach. Accessed data included prescription history, names, and medication details. Accounts were locked and password resets required. Equifax identity theft protection was offered.

Express Scripts notified members of unauthorized access to their Express Scripts mobile application accounts between April 30 and May 3, 2022. A bad actor used credentials obtained from a separate breach (credential stuffing) to access accounts. Affected data included prescription history, medication names, and pharmacy information. Express Scripts locked affected accounts and required password resets. Members were offered free identity theft protection via Equifax.

Express Scripts, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-01-23. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Express Scripts reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-10-18. 1 Massachusetts residents were affected. The report records the breach type as paper.

Express Scripts, Inc. notified the NH Attorney General of additional information regarding a 2008 incident where an unknown party threatened to expose member records to extort money. The FBI investigation revealed unauthorized access to names, SSNs, and dates of birth for approximately 1,771 New Hampshire residents. The company is cooperating with law enforcement and providing identity restoration services via Kroll Inc.

Express Scripts reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2008-11-03. 3,139 Massachusetts residents were affected. The report records the breach type as electronic.