Personal Data of Nearly 6 Million Patients Leaked in PharMerica Hack

Healthcare giant PharMerica has suffered a cyber incident resulting in hackers accessing personal and health data of 5,815,591 individuals.

In a data breach notice filed with the Office of the Maine Attorney General, PharMerica reveals that hackers accessed its computer network in March and may have copied personal and health information.

“Upon discovering the cybersecurity incident, we promptly began an internal investigation and engaged cybersecurity advisors to investigate and secure our computer systems,” the notification reads.

“The investigation determined that an unknown third party accessed our computer systems from March 12-13, 2023, and that certain personal information may have been obtained from our systems as a part of the incident.”

The potentially-affected data includes names, addresses, dates of birth, Social Security Numbers, medications and health insurance information.

The company says it has no reason to believe that anyone’s information has (so far) been misused for the purpose of committing fraud or identity theft. It is nonetheless offering a year’s worth of free credit monitoring to those affected.

As reported by BleepingComputer, the ransomware crew known as Money Message is said to be responsible for the attack.

According to the news site, the perps claimed to have stolen 4.7 TB of data consisting of at least 1.6 million unique records.

An unnamed threat actor has reportedly posted the full data dump on a hacking forum.

Bitdefender Digital Identity Protection scans the web for unauthorized leaks of your personal data, monitoring whether your accounts are exposed and making it easy to take action before disaster strikes.

Bitdefender Identity Theft Protection covers damages and financial loss from identity theft, complete identity theft restoration services, and identity theft insurance up to $2 million.