On Aug. 25, 2025, College Parkside Pharmacy, a community pharmacy operated by Albany College of Pharmacy and Health Sciences (ACPHS), reported a data breach. The breach was reported as a hacking incident and compromised both personally identifiable information (PII) and protected health information (PHI).
The cybersecurity incident was disclosed to the U.S. Department of Health and Human Services on Aug. 25, 2025, reporting at least 5,735 individuals affected. Exposed information may include names, contact information, dates of birth, driver's license numbers, Social Security numbers, health insurance details, prescription records and other medical information along with payment information.
The breach is considered high risk, due to the detail of information exposed, which could be used for identity theft or fraud if obtained by malicious actors.
In addition to required state and federal disclosures, the pharmacy will work to notify impacted individuals by mail.
If you believe your personal information may have been compromised in this breach:
More information about the pharmacy can be found on the Whitney Young Health website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.