PharMerica Data Breach Settlement – File by April 27, 2026
By eosguide team · Last updated
If your personal or medical information was swept up in the 2023 PharMerica ransomware attack — courtesy of a cybercriminal gang that apparently named themselves "Money Message" — a $5.275 million class action settlement may entitle you to up to $10,000 in reimbursement, a pro rata cash payment, and free credit monitoring.
What happened
Class period: On or around March 2023 (date of the ransomware attack and data exfiltration)
- PharMerica is a nationwide pharmacy services provider serving patients in over 3,100 long-term care facilities, senior living communities, and other healthcare programs — essentially, they hold a lot of sensitive data for a lot of vulnerable people
- In March 2023, a ransomware gang calling themselves "Money Message" (points for branding, zero points for ethics) breached PharMerica's computer network and exfiltrated a staggering 4.7 terabytes of data
- On March 28, 2023, Money Message claimed responsibility and posted a sample of the stolen data on the dark web, just to really twist the knife
- The exposed data included full names, addresses, dates of birth, Social Security numbers, and medical and health insurance information
- A class action lawsuit, In Re: PharMerica Data Breach Litigation, Case No. 3:23-cv-00297-RGJ-CHL, was filed in the U.S. District Court for the Western District of Kentucky
- PharMerica denies all liability and wrongdoing; the parties agreed to settle to avoid the cost and uncertainty of trial
What you can get
Cash Payment A – Documented Losses
Up to $10,000
Actual, documented, unreimbursed losses fairly traceable to the breach; supporting documentation required; losses must have been incurred on or after the applicable Data Incident date through April 27, 2026
Cash Payment B – Pro Rata Cash
Pro rata share of Net Settlement Fund
No documentation required; all valid claimants receive the same amount; final amount depends on number of claims filed
Credit Monitoring – Kroll Complete
1 year — automatic
Automatic for ALL class members — no claim required; includes 3-bureau monitoring, dark web scanning, payday loan monitoring, Social Security scan, fraud consultation, identity theft restoration, $1M identity theft insurance with no deductible, credit score reporting, and real-time inquiry alerts
Key dates
| Action | Date | What it means |
|---|---|---|
| Claim deadline | April 27, 2026 | Last day to file a claim |
| Opt out | April 13, 2026 | Keep your right to sue separately |
| Object | April 13, 2026 | Tell the court you disagree |
| Final hearing | May 12, 2026 | Judge decides whether to approve |
Who may qualify
- Are a living U.S. resident who received a notice of the PharMerica Data Incident
- Were a patient of PharMerica or one of its healthcare partners whose personal or medical information was potentially exposed
- Are not a PharMerica officer or director, a governmental entity, or a judge assigned to this case
How to file
- Visit the official claim form at pmcsettlement.com by April 27, 2026
- Select your benefit(s): Cash Payment A (Documented Losses), Cash Payment B (Pro Rata Cash), or both
- Submit your claim online by April 27, 2026, or mail a paper Claim Form postmarked no later than April 27, 2026
- Note: To receive payment via electronic or ACH transfer, you must file online — no paper workarounds for that one
- Credit Monitoring is automatic for all class members — you don't need to file a claim to receive it
Mail paper claims to: Bente, et al. v. PharMerica Data Breach, c/o Settlement Administrator – 83343, Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391
Proof required
- Cash Payment A – Documented Losses: Receipts, bank statements, or other third-party documentation of unreimbursed expenses tied to the breach; self-prepared documents alone are not sufficient, but can support other submitted documentation
- Cash Payment B – Pro Rata Cash: No proof required
- Credit Monitoring: No claim or proof required — it's automatic
Payment timing
The Final Approval Hearing is scheduled for May 12, 2026, at 1:00 PM ET. Cash payments and credit monitoring will be distributed after the settlement receives final approval and the appeal window closes. Electronic and ACH payments are available for online filers; paper filers will receive checks. Patience is strongly encouraged — and apparently required.
Important links
Contact
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
Extra details
- This is one of the more generous documented loss caps we've seen — up to $10,000 per person, which is double the $5,000 offered in many similar settlements
- All class members automatically receive one year of Kroll Complete Monitoring, no claim form required — so even if you do nothing, you're getting something (though you'll still give up your right to sue)
- Cash Payment A covers a wide range of expenses including attorney fees, credit repair costs, credit freeze fees, unauthorized charges, and even postage and mileage — keep those receipts
- If you change your address, it's your responsibility to update the Settlement Administrator — don't make them chase you for your own money
- Watch for scams: the only authorized settlement website is pmcsettlement.com
FAQ
Who qualifies for this settlement?
Do I have to file a claim to get anything?
What kinds of expenses can I claim under Cash Payment A?
How much will the pro rata cash payment be?
Can I claim both Cash Payment A and Cash Payment B?
What happens if I do nothing at all?
How do I opt out?
Info only. Verify details on the official site. Not legal, financial, or tax advice. Legal
Related guides
McLaren Health Care Data Breach Settlement 2026
McLaren Health Care Corporation suffered two separate data breaches in 2023 and 2024 that exposed the personal and healt…
Christian Dior Data Breach Settlement – File a Claim by May 25, 2026
In January 2025, an unauthorized party waltzed into a Christian Dior customer database and helped themselves to names, a…
MOVEit Cadence Bank Data Breach Settlement – File a Claim by June 4, 2026
Cybercriminals exploited the MOVEit file transfer tool in May 2023 and helped themselves to Cadence Bank customer data. …
Share this: