2023 Money Message ransomware — 5.8M patients
Data compromised
Personal data
Technical writeup
One of largest U.S. pharmacy service providers. Hackers accessed personal data of almost 6M patients in March 2023. Money Message ransomware group leaked SSNs, Medicare/Medicaid numbers, medications, and clinical data. Consolidated class action Lurry v. PharMerica resolved June 29, 2026 with final court approval of a $5.275M settlement fund plus monitoring and security-practice changes.
Root cause
Money Message ransomware; unauthorized access.
References
- https://techcrunch.com/2023/05/16/us-pharmacy-giant-says-hackers-accessed-personal-data-of-almost-6-million-patients/
- https://www.mcknightsseniorliving.com/news/pharmericas-5-million-data-breach-settlement-receives-final-approval-from-court/
- https://www.hipaajournal.com/pharmerica-data-breach-settlement/
- https://www.classaction.org/media/pharmerica-settlement-notice.pdf