The notice will include information on steps individuals can take to protect themselves against potential fraud or identity theft.

On its website PharMerica says: “At this point, PharMerica is not aware of any fraud or identity theft to any individual as a result of this incident, but is nonetheless notifying potentially affected individuals to provide them with more information and resources. As we mentioned in our May ransomware review, Taiwanese PC parts maker MSI also fell victim to Money Message. Money Message is a new ransomware which targets both Windows and Linux systems. The gang claims that they encrypted almost the entire PharMerica infrastructure, and has published parts of the stolen data to their leak site. Ransomware group Money Message has claimed responsibility for the attack.

The incident was noticed on March 14, and a week later PharMerica identified that the personal information accessed included names, dates of birth, Social Security numbers, medication lists and health insurance information. The investigation showed that an unauthorized party accessed PharMerica computer systems on March 12-13, 2023, and that this party may have had access to certain personal information. The Data Breach Notification lists the total number of persons affected as 5,815,591.Īn investigation was started after PharMerica noticed suspicious activity on its network. US pharmacy giant PharMerica has notified over 5.8 million people about a security incident in which it says personal information and medical information may have been obtained by cybercriminals.

Free download in to the breach