Eckerd Connects, a national organization specializing in workforce development and family support services, experienced a major data breach. On Nov. 11, 2024, the organization detected suspicious activity within its internal network. The cyberattack compromised both personally identifiable information (PII) and protected health information (PHI).
An investigation is ongoing and has determined that exposed information may include names, addresses, dates of birth, Social Security numbers, health insurance information and medical condition, treatment or diagnosis information. The total number of affected individuals has not been released, but is believed to be in the thousands.
Eckerd Connects published a Notice of Data Security Incident on its website on Sept. 26, 2025 and will be notifying impacted individuals and their families by mail once the investigation is complete.
To support those potentially impacted, Eckerd Connects has established a dedicated and confidential response line in order to answer questions and provide guidance on protecting against misuse of personal information. Individuals can contact 866-291-2447, Monday through Friday, 8 a.m. to 5:30 p.m. CT.
If you believe your personal information may have been compromised in this breach:
For more information about the organization, visit the Eckerd Connects website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.