GenRx Pharmacy

Disclosed Dec 18, 2020137,110 affectedConfirmed

The covered entity (CE), GenRX Pharmacy, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 137,110 individuals. The ePHI involved included names, addresses, Social Security numbers, dates of birth, health insurance information, medication prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE revised its policy and procedures and implemented new technical safeguards. OCR obtained assurances that the CE implemented the corrective actions noted.

What is known

People affected	137,110 (as reported to HHS)
Disclosed	Dec 18, 2020
Happened	Sep 27, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: GenRx Pharmacy

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): GenRx Pharmacy (Healthcare Provider, AZ)

Notices filed

Residents of CADec 18, 2020

California AGCount not stated

TotalDec 18, 2020

HHS archive137,110 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 137110by backfillSource

summary2026-09-25

empty to The covered entity (CE), GenRX Pharmacy, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 137,110 individuals. The ePHI involved included names, addresses, Social Secby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about GenRx Pharmacy