Express Scripts, Inc.
ent_019fba2bab9b1465654ad38b8d324186
Disclosures
6
State AG · 5 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
1,771
as filed · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Express Scripts, Inc.
- Normalized
- express scripts— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900BWSHPQQ5FX8Q04
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- express-scripts.com
Disclosure history (6)newest first
- 🏛️Massachusetts State AGas victim2026-05-01
Berkeley Research Group (BRG), a third-party vendor for Express Scripts, experienced a data breach from Feb 28 to Mar 2, 2025. An unauthorized actor accessed BRG systems and copied personal information of Express Scripts clients. BRG contained the incident, rotated credentials, and rebuilt systems. Affected individuals received 24 months of credit monitoring via Kroll. Federal law enforcement was notified.
- 🦬Montana State AGas victim2022-07-10
Express Scripts reported a data breach to the Montana Attorney General. The breach was reported on 2022-07-10. The breach occurred on 4/30/2022. 2 Montana residents were affected.
- 🐻California State AGas victim2022-06-03
Express Scripts, Inc. reported a cybersecurity incident involving unauthorized access to its mobile application. Between April 30 and May 3, 2022, a bad actor used stolen credentials (user ID and password obtained from another breach) to access member accounts. The actor may have viewed prescription history for the last 24 months, including names, medication details, and pharmacy information. No financial data or SSNs were compromised. Express Scripts locked affected accounts and required password resets, and offered free identity theft protection via Equifax.
- 🦬Montana State AGas victim2022-06-01
Express Scripts reported a data breach to the Montana Attorney General. The breach was reported on 2022-06-01. The breach occurred on 4/30/2022. 36 Montana residents were affected.
- 💎Delaware State AGas victim2022-05-30
Express Scripts notified members of unauthorized access to their Express Scripts mobile application accounts between April 30 and May 3, 2022. A bad actor used credentials obtained from a separate breach (credential stuffing) to access accounts. Affected data included prescription history, medication names, and pharmacy information. Express Scripts locked affected accounts and required password resets. Members were offered free identity theft protection via Equifax.
- ⛰️New Hampshire State AGas victim2009-09-14
Supplemental state-AG notice from Express Scripts, Inc. (NH) regarding a 2008 extortion threat involving unauthorized access to member records. The incident affected 1,771 New Hampshire residents, exposing names, SSNs, DOBs, and some prescription data. The actor threatened to expose records. FBI was notified; investigation ongoing. Notifications sent Oct 28, 2008. Kroll Inc. contracted for identity restoration.