On or around January 25, 2025, Boudreaux’s Specialty Compounding Pharmacy, a locally owned pharmacy based in Shreveport, Louisiana, experienced a network disruption that impacted certain systems. According to the company’s official notification, a third-party computer forensics team was immediately engaged to investigate the incident.
The investigation determined that an unauthorized party gained access to specific data during the event. After a thorough review, Boudreaux’s confirmed that protected health information (PHI) may have been impacted.
The breach was disclosed to the U.S. Department of Health and Human Services on April 10, 2025, and is publicly listed on the HHS breach portal. In total, 6,270 individuals in the United States were affected by this incident.
The types of information exposed include a combination of personally identifiable information (PII) and protected health information (PHI) like first and last names, address information, telephone numbers, dates of birth, prescription information, health insurance information, prescription cost information, email addresses and Social Security numbers.
For those seeking more information or assistance, Boudreaux’s has established a dedicated call center at 1-833-998-8070 and can also be contacted in writing at 2551 Greenwood Road, Suite 110, Shreveport, LA 71103.
While there is no evidence that the exposed information has been misused, individuals are encouraged to remain vigilant. It is advisable to review healthcare statements for accuracy and promptly report any unfamiliar services or charges to your provider or insurance carrier. As a precaution, individuals may also consider placing a fraud alert or credit freeze with the major credit reporting agencies: TransUnion, Experian, and Equifax. Additional resources and information about identity theft protection can be found through the Federal Trade Commission at identitytheft.gov.
If you believe you may be affected, monitor your account statements for suspicious activity, and report any suspected identity theft to law enforcement, your state attorney general, and the FTC.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.