PharMerica Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating PharMerica Corporation, a partner of BrightSpring Health, regarding its recent data breach. The PharMerica data breach involved sensitive personal identifiable information and protected health information belonging to over 5,800,000 individuals.


PharMerica is a national pharmacy network partnered with by BrightSpring Health. Founded through the merger of two major pharmacy companies in 2007, PharMerica specializes in serving senior living centers, nursing homes, public health organizations, and post-acute care networks with a streamlined medication platform. Indeed, PharMerica provides specialized services to approximately 3,100 medical facilities in partnership with thousands of local and back-up pharmacies. In 2019, PharMerica and BrightSpring Health merged in a $1.3 billion acquisition deal, making it the leading provider of home and community-based healthcare and pharmacy services. Headquartered in Louisville, Kentucky, PharMerica also operates a large customer support center in Tampa, Florida.


On March 14, 2023, PharMerica discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. On March 28, a known ransomware group claimed to have accessed and acquired this sensitive information, which it claims to have published on the dark web. Through its investigation, PharMerica determined that the unauthorized actor accessed and obtained this information between March 12 and 13, 2023. On May 12, 2023, PharMerica began notifying individuals whose information may have been impacted. On June 8, 2023, PharMerica sent out additional notifications to impacted individuals. The type of information exposed includes:

  • Name
  • Social Security number
  • Date of birth
  • Address
  • Medical information (e.g., medications)
  • Health insurance information

If you are a current or former customer of PharMerica or BrightSpring Health:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the PharMerica data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by PharMerica Corporation;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: