PillPack
Disclosed May 19, 20233 years ago19,032 affectedConfirmed
The covered entity (CE), PillPack, reported that it experienced a hacking attack affecting the protected health information (PHI) of 19,032 individuals. The PHI involved included names and medications. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 19,032 (as reported to HHS) |
|---|---|
| Disclosed | May 19, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): PillPack (Healthcare Provider, NH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 19, 2023 | 19,032 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.