College Hometown Pharmacy, a New York pharmacy operating within Hometown Health Centers, experienced a major data breach. The cybersecurity incident compromised the personal and protected health information of at least 9,742 pharmacy customers.
The pharmacy disclosed the data breach to the U.S. Department of Health and Human Services on Aug. 25, 2025. The breach was reported has a hacking incident. Exposed information may include names, addresses, phone numbers, dates of birth, Social Security numbers, health insurance information, prescription history and transactions and payment information.
The level of information possibly exposed heightens the severity of the breach and it can increase risks of identity theft, fraud and unauthorized medical claims.
In addition to required state and federal disclosures, the pharmacy should notify affected customers by mail.
If you believe your personal information may have been compromised in this breach:
More information about the pharmacy and medical providers can be found on the Hometown Health Centers website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.