Morton Drug Company Data Breach Impacts 40K: SSNs & Names Exposed

On Nov. 7, 2025, Morton Drug Company, an independent pharmacy, announced it had experienced a significant network cybersecurity incident. The breach, which was first discovered on Aug. 20, 2025, impacted the company’s IT systems and led to the exposure of sensitive personally identifiable information (PII) and protected health information (PHI) of 40,051 individuals in the U.S.

The investigation, which concluded on or around Oct. 21, 2025, determined that the types of information exposed included names, addresses, prescription information, and, in some cases, Social Security numbers. The exact methods of the breach are not yet publicly known. However, the type of data exfiltrated and the number of people impacted suggests that this is a serious cybersecurity incident. As such, the exposure of PII and PHI puts individuals at risk of identity theft and medical fraud.

The company posted a notice of data security incident on its website on Nov. 7, 2025 and reported it to the U.S. Department of Health and Human Services on Nov. 10, 2025.

Morton Drug Company's response

Upon discovering the breach, Morton Drug Company immediately engaged third-party cybersecurity experts to assess, contain and remediate the incident. Law enforcement was also notified to assist in the investigation. The company has since reviewed and strengthened its information security protocols to help prevent similar incidents in the future.

If you receive notification from Morton Drug Company or your provider about this breach, you may want to:

• Sign up for the free identity theft protection services, if offered by Morton Drug Company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

For those affected, Morton Drug Company established a dedicated call center to answer questions and provide support. Individuals can reach the call center at 1-833-594-0797 from 8 a.m. to 8 p.m. ET, Monday through Friday.