Clustered 7 filings across 6 jurisdictions · filing window May 12, 2023 → Jun 19, 2023. View entity profile → Other incidents for this victim →
incident inc_75933fc933bf4f8f · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA DE KY ME MT OR
HHS OCR · State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Mar 12, 2023 → Mar 13, 2023
When the intrusion reportedly occurred, per the linked filings
Mar 14, 2023
Reported by DELAWARE AG, CALIFORNIA AG filings
Mar 21, 2023
Reported by OREGON AG, MAINE AG filings
PharMerica Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2023-05-12. The breach occurred during 3/12/2023 - 3/13/2023. The breach was discovered on 3/21/2023. 5,815,591 individuals were affected. Notice was sent on 5/12/2023.
Affected (this filing): 5,815,591
PharMerica Corporation reported to HHS on 2023-05-12 a Hacking/IT Incident affecting 5,815,591 individuals. Breached information located on Network Server. The incident involved PHI including names, addresses, DOB, SSNs, claims, and medications. Response included credit monitoring and enhanced safeguards.
Affected (this filing): 5,815,591
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
PharMerica notified affected individuals in Delaware and other states of a cybersecurity incident occurring March 12-13, 2023, discovered on March 14, 2023. An unknown third party accessed systems, obtaining names, addresses, DOBs, SSNs, medications, and health insurance info. PharMerica engaged cybersecurity advisors, enhanced technical security, and offered one year of Kroll identity monitoring.
PharMerica Corporation notified Delaware AG of a cybersecurity incident occurring March 12-13, 2023, discovered March 14, 2023. An unknown third party accessed systems, obtaining names, addresses, DOBs, SSNs, medications, and health insurance info. PharMerica engaged cybersecurity advisors, enhanced technical security, and offered one year of Kroll identity monitoring.
PharMerica Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2023-06-08. The breach occurred from 3/12/2023 to 3/13/2023. 10,567 Montana residents were affected.
Affected (this filing): 10,567
PharMerica Corporation reported an external system breach (hacking) occurring March 12-13, 2023, discovered on March 21, 2023. The incident affected 5,815,591 individuals, including 40,248 in Maine. Personal information acquired included names and Social Security Numbers. PharMerica provided written notification and offered one year of credit and identity monitoring services through Kroll.
Affected (this filing): 5,815,591
PharMerica Corporation reported that an unknown third party accessed its computer systems from March 12-13, 2023. The company discovered suspicious activity on March 14, 2023. Affected data included names, addresses, dates of birth, Social Security numbers, medications, and health insurance information. PharMerica engaged cybersecurity advisors and is offering one year of identity monitoring through Kroll.