PharMerica
Disclosed May 12, 20233 years ago5,815,591 affectedConfirmed
Hackers access personal and medication data of 5.8 million PharMerica patients
Pharmacy services provider PharMerica learned of suspicious network activity on March 14, 2023 and found that an unknown party had accessed its systems on March 12 and 13. Names, addresses, dates of birth, Social Security numbers, medications and insurance details of about 5.8 million current and deceased individuals were exposed.
What is known
| People affected | 5,815,591 (as reported to HHS) |
|---|---|
| Disclosed | May 12, 2023 |
| Discovered | Mar 21, 2023 |
| Happened | Mar 12, 2023 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: PharMericaoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: PharMericaattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: PharMericajustice.oregon.gov · Official notice | Official notice |
| California AG data breach notice: PharMerica Corporationoag.ca.gov · Regulator | Regulator |
| US pharmacy giant says hackers accessed personal data of almost 6 million patientstechcrunch.com · News | News |
| HHS OCR breach report (archive, resolved): PharMerica (Healthcare Provider, KY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Oregon DOJresidents of OR | May 12, 2023 | 5,815,591 |
| HHS archivetotal | May 12, 2023 | 5,815,591 |
| Researchtotal | May 16, 2023 | 5,800,000 |
| Delaware DOJresidents of DE | Jun 8, 2023 | 19,393 |
| California AGresidents of CA | Jun 19, 2023 |
Other breaches at PharMerica
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Jan 12, 2018Jan 12, 20188 years ago | Jan 12, 20188 years ago | Not stated | Healthcare | Confirmed | Unknown |
History of this record
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 5800000 to 5815591 · backfill source
- 2026-09-25 · sector: other to health · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: ["names"] to ["names","addresses","dob","ssn","health","insurance"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 5800000 · seed source
- 2026-09-25 · summary: empty to Pharmacy services provider PharMerica learned of suspicious network activity on March 14, 2023 and found that an unknown party had accessed its systems on March 12 and 13. Names, addresses, dates of birth, Social Security numbers, medicatio · seed source
- 2026-09-25 · title: empty to Hackers access personal and medication data of 5.8 million PharMerica patients · seed source
- 2026-09-25 · disclosed: 2023-06-08 to 2023-05-12 · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · disclosed: 2023-06-19 to 2023-06-08 · backfill source
- 2026-09-25 · discovered: empty to 2023-03-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.