Ridgeway Pharmacy Ltd

Ridgeway Pharmacy Ltd disclosed a security breach affecting its website, developed by third-party vendor Korinver USA, LLC. On July 23, 2026, the company discovered operational issues leading to an investigation that found an unknown third party exploited a vulnerability to access the website with elevated privileges. The incident potentially affected 807 New Hampshire residents, exposing names, dates of birth, addresses, prescription/health information, insurance information, and payment card information. Social security numbers and driver's license numbers were not involved. The company remediated the website, enhanced security, and offered identity protection services.

Ridgeway Pharmacy Ltd based in Victor, Montana, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-08-21 and reported on 2026-09-25. 33,485 Texas residents were affected. 258,920 individuals affected in total. Types of information involved: Name of individual;Address;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Notice by publication in print media;U.S. Mail;Broadcast on Texas-wide Media.

Ridgeway Pharmacy, Ltd reported to HHS on 2026-09-21 a Hacking/IT Incident affecting 258920 individuals. Breached information located on Network Server, Other. Business Associate was present.

Ridgeway Pharmacy Ltd reported a data breach to the Oregon Attorney General. The breach was reported on 2026-09-21. The breach occurred during 6/7/2026 - 7/21/2026. The breach was discovered on 7/23/2026. 258,920 individuals were affected. Notice was sent on 9/21/2026.

Ridgeway Pharmacy, Ltd reported a data breach to the Indiana Attorney General. The breach occurred on 2026-06-07 and was reported on 2026-09-21. 6,608 Indiana residents were affected. 258,920 individuals affected in total.

Ridgeway Pharmacy Ltd disclosed that an unauthorized party accessed its website, which was designed and developed by a third-party vendor. The incident occurred on June 7, 2026, and was discovered on August 21, 2026. Affected data included names, addresses, dates of birth, health information, insurance information, prescription information, and payment card information. Social Security numbers and driver's license numbers were not involved. The company engaged forensic specialists, notified law enforcement, remediated the website, and is offering 12 months of credit monitoring to affected individuals.

Ridgeway Pharmacy Ltd. notified individuals that an unauthorized party accessed its website, designed by a third-party vendor, on or before August 21, 2026. Affected data included names, addresses, dates of birth, health information, insurance information, prescription information, and payment card information. SSNs and driver's license numbers were not involved. The company engaged forensic specialists, notified law enforcement, remediated the website, and is offering 12 months of credit monitoring.

Ridgeway Pharmacy, Ltd reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-09-21. The reporting organization type is Health Care. 215 Vermont residents were affected. Categories of data breached: Financial Account Codes, Credit and Debit Account Info, Health Records.

Ridgeway Pharmacy Ltd. disclosed that an unauthorized party accessed its website, which was designed and developed by a third-party vendor. The incident was discovered on August 21, 2026. Affected data may include name, address, date of birth, health information, insurance information, payment card information, and prescription information. Social security numbers and driver's license numbers were not involved. The company engaged forensic specialists, reported to law enforcement, remediated the website, and is offering 12 months of credit monitoring.

Ridgeway Pharmacy, Ltd. notified the Iowa Attorney General of a breach affecting its pharmacy website, developed by a third-party vendor. On July 23, 2026, operational issues were discovered, leading to an investigation that revealed unauthorized access via a website vulnerability. Approximately 2,039 Iowa residents were affected, with data including names, DOB, addresses, prescription/health info, insurance info, and payment card data. No SSNs or driver's licenses were involved. Ridgeway engaged forensic specialists, reported to federal law enforcement, remediated the site, and offered 12 months of credit monitoring via TransUnion/Cyberscout.

Ridgeway Pharmacy Ltd. notified Massachusetts residents that a security incident may have involved their name, address, date of birth, health information, insurance information, and prescription information. The company stated that social security numbers and driver's license numbers were not involved. Ridgeway launched an investigation and is offering 12 months of credit monitoring and fraud assistance services through Cyberscout at no charge to affected individuals.