We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Advertising Disclosure

vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

PharMercia Confirms Data Breach of 5.8 Million Patients

PharMercia Confirms Data Breach of 5.8 Million Patients
Zane Kennedy Published on 18th May 2023 Cybersecurity Researcher

PharMerica suffered a massive data breach on March 12th, 2023, which resulted in the exposure of the personal sensitive information of 5.8 million of its patients. Unfortunately, all stolen data has already been posted on the dark web.

According to the notification submitted by PharMerica to the Office of the Maine Attorney General, the hackers breached their internal system, stealing patients' full names, addresses, dates of birth, social security numbers, medication details, and health insurance information.

The data breach occurred between March 12th and March 13th, but was only discovered on March 14th. However, the impacted individuals were only notified on May 12th – 2 months after the data breach.

In a statement posted to its website, PharMerica said, “PharMerica and its parent company, BrightSpring Health Services, Inc., learned of suspicious activity on their computer network. Upon discovering the incident, PharMerica promptly began an internal investigation and engaged cybersecurity experts to investigate and secure its computer systems.”

While PharMerica did not specify the type of hacking incident, the Money Message ransomware gang claimed responsibility for the attack. Money Message claimed to have stolen 4.7 terabytes of data and started leaking patient information allegedly stolen from PharMerica, threatening to reveal more and more if a ransom wasn’t paid.

On April 9th, 2023, it appears that time ran out for PharMercia to pay the ransom, as the threat actors published what they claim is all of the stolen data on their extortion site. Unfortunately, the files are still available for download. A threat actor has also reposted the entire data dump on a Clearnet hacking forum, breaking the file into 13 parts for easier downloading.

PharMerica has offered one year of identity protection fraud monitoring services through Experian to affected individuals and recommends that “individuals regularly monitor credit reports, account statements and benefit statements.”

The company advised that individuals who notice any suspicious activity should immediately inform the entity with which the account is held and, without delay, report any fraudulent activity to the appropriate law enforcement authorities.

In its statement regarding the data breach, PharMercia reaffirmed its commitment to the privacy and security of patient information and concluded that “PharMerica has taken, and is taking, additional steps, including changes in its processes and procedures, to help reduce the likelihood of a similar event from happening in the future.”

About the Author

Zane is a Cybersecurity Researcher and Writer at vpnMentor. His extensive experience in the tech and cybersecurity industries provides readers with accurate and trustworthy news stories and articles. He aims to help individuals protect themselves through informative content and awareness of cybersecurity's crucial role in today's digital landscape.