Data of 5.8 million PharMerica patients stolen by ransomware gang

On Friday 12^th of May 2023, a US-based pharmacy services provider PharMerica disclosed that they had suffered a data breach involving the personal information of over 5.8 million patients.

According to a data breach notification, the threat actors breached PharMerica’s system on Sunday 12^th of March 2023 and stole the full names, addresses, dates of birth, social security numbers (SSNs), medications, and health insurance information of 5,815,591 individuals.

PharMerica has stated that they are offering one year of identity protection fraud monitoring services through Experian, so affected individuals are recommended to accept the offer to minimize the risk and impact of malicious attacks.

Although PharMerica did not reveal the type of attack or who was responsible for it, the Money Message ransomware gang claimed the attack on their dark-web leak site where they began to publish 4.7 TB of the stolen data which is believed to consist of at least 1.6 million unique records of patients’ personal information.