PharMerica Data Breach Settlement – File by April 27, 2026

What happened

Class period: On or around March 2023 (date of the ransomware attack and data exfiltration)

• PharMerica is a nationwide pharmacy services provider serving patients in over 3,100 long-term care facilities, senior living communities, and other healthcare programs — essentially, they hold a lot of sensitive data for a lot of vulnerable people

• In March 2023, a ransomware gang calling themselves "Money Message" (points for branding, zero points for ethics) breached PharMerica's computer network and exfiltrated a staggering 4.7 terabytes of data

• On March 28, 2023, Money Message claimed responsibility and posted a sample of the stolen data on the dark web, just to really twist the knife

• The exposed data included full names, addresses, dates of birth, Social Security numbers, and medical and health insurance information

• A class action lawsuit, In Re: PharMerica Data Breach Litigation, Case No. 3:23-cv-00297-RGJ-CHL, was filed in the U.S. District Court for the Western District of Kentucky

• PharMerica denies all liability and wrongdoing; the parties agreed to settle to avoid the cost and uncertainty of trial

What you can get

Key dates

Who may qualify

• Are a living U.S. resident who received a notice of the PharMerica Data Incident
• Were a patient of PharMerica or one of its healthcare partners whose personal or medical information was potentially exposed
• Are not a PharMerica officer or director, a governmental entity, or a judge assigned to this case (you know the drill by now)

How to file

1. Visit the official claim form at https://forms.ksacms.com/efiling/fr/eform/pharmerica_claimform/new?form-version=1&fr-wizard-page=section-1
2. Select your benefit(s): Cash Payment A (Documented Losses), Cash Payment B (Pro Rata Cash), or both
3. Submit your claim online by April 27, 2026, or mail a paper Claim Form postmarked no later than April 27, 2026
4. Note: To receive payment via electronic or ACH transfer, you must file online — no paper workarounds for that one
5. Remember: Credit Monitoring is automatic for all class members; you don't need to file a claim to receive it

Proof required

• Cash Payment A – Documented Losses: Receipts, bank statements, or other third-party documentation of unreimbursed expenses tied to the breach; self-prepared documents (like handwritten notes) alone are not sufficient, but can support other submitted documentation
• Cash Payment B – Pro Rata Cash: No proof required
• Credit Monitoring: No claim or proof required — it's automatic

Payment timing

The Final Approval Hearing is scheduled for May 12, 2026, at 1:00 PM ET. Cash Payments and Credit Monitoring will be distributed after the Settlement receives Final Approval and the appeal window closes. Electronic and ACH payments are available for online filers; paper filers will receive checks. Patience is strongly encouraged — and apparently required.

Important links

• Official website
• Claim form
• FAQs
• Documents

Contact

Extra details

• This is one of the more generous documented loss caps we've seen — up to $10,000 per person, which is double the $5,000 offered in many similar settlements

• All class members automatically receive one year of Kroll Complete Monitoring, no claim form required — so even if you do nothing, you're getting something (though you'll still give up your right to sue)

• Cash Payment A for documented losses covers a wide range of expenses incurred on or after the applicable Data Incident date through April 27, 2026, including attorney fees, credit repair costs, credit freeze fees, unauthorized charges, and even postage and mileage — keep those receipts

• If you change your address, it's your responsibility to update the Settlement Administrator — don't make them chase you for your own money

• Watch for scams: the only authorized settlement website is pmcsettlement.com

FAQ