By 
Pharmacy services provider PharMerica has disclosed a huge data breach that affected more than 5.8 million patients, exposing their medical data to hackers.
PharMerica is a pharmacy services provider in 50 U.S. states, operating 180 local and 70,000 backup pharmacies, and serving 3,100 medical facilities nationwide.
According to PharMerica’s data breach notification, the hackers breached its system on March 12th, 2023, stealing the full names, addresses, dates of birth, social security numbers (SSNs), medications, and health insurance information of 5,815,591 people.
The firm discovered the intrusion on March 14th, 2023, which lasted two days and led to the compromise of customers’ personal information. All the impacted individuals were notified on last Friday.
PharMerica does not mention the type of hacking incident, but the Money Message ransomware gang claimed the attack on March 28th, 2023, when they began publishing stolen data.
Money Message which is a new ransomware operation that launched around March 2023, claimed to have stolen 4.7 TB of data during their attack on PharMerica, stating that it consisted of at least 1.6 million unique records of personal information.
On April 9th, 2023, the hackers published what they claim is all of the stolen data on their extortion site. The files are still available for download at this time.
A threat actor has already posted the entire data dump on a clearnet hacking forum, breaking the file into 13 parts for easier downloading.
PharMerica offers one year of identity protection fraud monitoring services through Experian, so affected individuals can take up the offer to minimize the risk and impact of malicious attacks.
