SCA Pharmaceuticals, LLC

SCA Pharmaceuticals Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred around July 4, 2022. The breach was discovered the following day, on July 5, 2022. The incident affected one Maine resident, and approximately 1900 individuals in total. The compromised information included names or other personal identifiers in combination with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. The company began notifying affected individuals in writing on August 29, 2022, and offered 24 months of credit monitoring services.

SCA Pharmaceuticals, LLC notified the New Hampshire Attorney General on August 29, 2022, of a ransomware incident discovered on July 5, 2022. Malicious actors infected SCA systems, causing operational issues. SCA paid a ransom to obtain a decryptor and recover exfiltrated data. The data potentially contained PII, SSNs, health information, and bank account details for one New Hampshire resident (and potentially others not scoped to NH). SCA engaged forensic investigators, reported to the FBI, and provided credit monitoring services to affected individuals.

SCA Pharmaceuticals, LLC notified Montana residents of a July 5, 2022 malware incident involving personal data including SSNs, health info, and bank details. The company reported to the FBI, engaged forensic investigators, and offered Experian identity protection services.

SCA Pharmaceuticals Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-08-29. 121 Massachusetts residents were affected. The report records the breach type as electronic.

SCA Pharmaceuticals Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-07-04 and was reported on 2022-07-05. 4 Indiana residents were affected. 1,968 individuals affected in total.