Chiesi USA Data Breach Exposes SSNs & Medical Info

Published
December 22, 2025
Updated
January 2, 2026
Chiesi USA Data Breach Exposes SSNs & Medical Info
Chiesi USA

Affected by the

Chiesi USA

data breach?

Join the Lawsuit

Chiesi USA, Inc., a specialty pharmaceutical company headquartered in Cary, North Carolina, recently reported a significant data breach exposing both personally identifiable information (PII) and protected health information (PHI) of at least 1,835 individuals in the U.S., including 262 in Massachusetts, one in Maine, and nine in New Hampshire.

On Dec. 22, 2025, the company disclosed the incident to the Massachusetts Attorney General’s office, confirming that it involved sensitive personal and medical information, including first and last names, Social Security numbers, driver’s license details, financial account information, and medical records.

While the exact method of the breach has not been publicly detailed, Chiesi USA stated that the incident involved unauthorized access to its systems. Beginning on Dec. 22, 2025, the company disclosed the data breach to the Attorney Generals' offices in Massachusetts, New Hampshire and Maine. Chiesi USA has also notified impacted individuals by mail.

Chiesi USA's response

In response to the breach, Chiesi USA has taken several important measures. The company worked with cybersecurity experts to conduct a thorough investigation, secure its systems, and implement additional technical safeguards to prevent future incidents. To help affected individuals protect their identities, Chiesi USA is offering 24 months of complimentary credit monitoring and identity restoration services through Experian.

If you receive notification from Chiesi USA or your provider about this breach, you may want to:

  • Sign up for the free Experian identity theft protection services, offered by the company.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

For affected individuals with questions, Chiesi USA has set up a call center at 833-918-4088, Monday through Friday, 9 a.m. to 9 p.m. ET.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Chiesi USA
Consumers Notification date
12222025
Date of Breach
Breach Discovered Date
August 28, 2025
Total People Affected
1835
Information Types Exposed
  • Drivers Licenses
  • Driver’s License Number
  • Financial Account
  • Financial Account Information
  • Medical Information
  • Medical Records
  • Name
  • Passport Number
  • Social Security number
  • Username and Password
  • First and last name
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image