Birdi Data Breach Exposes Impacts Employees: SSNs Exposed

Birdi Inc., a digital pharmacy based in Plymouth, Michigan, disclosed a data breach that exposed employee personal information, including Social Security numbers.

On Aug. 12, 2026, an unauthorized individual gained access to a Birdi employee's work email account after that employee opened a malicious file. During the brief period of access, the unauthorized individual opened an internal Birdi report that contained employee information.

The types of personal information exposed included names, Social Security numbers, home addresses, telephone numbers and pay rates.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Sept. 9, 2026. The company sent consumer notices to impacted individuals on Sept. 9, 2026.

Birdi's response to the breach

Birdi is offering 18 months of free credit monitoring and identity theft protection services through Norton/LifeLock Benefit Solutions.

Affected individuals were told they do not need to take action to enroll, as they were expected to receive a welcome email from Norton LifeLock on or around Sept. 1, 2026, with instructions to confirm their identity and create an account.

Existing retail LifeLock members were advised to call Norton LifeLock Member Services at 800-607-9174 during business hours (Monday through Friday, 8 a.m. to 6 p.m. CDT) to cancel their retail coverage before transitioning to the employer-paid benefit plan. After canceling, those members would then receive a separate welcome email with instructions for the new plan.

Individuals with questions about the breach were directed to email questions@birdirx.com, where a member of the company's compliance, human resources or information security teams would respond.