WIRX Pharmacy Data Breach EXposes PHI and PII

WIRX Pharmacy, a specialty pharmacy serving injured workers, recently experienced a data breach affecting the personal and health information of some individuals.

The breach occurred when unauthorized access to WIRX Pharmacy’s network was detected between Dec. 6 and Dec. 7, 2025. During this period, certain files on the company’s systems were accessed or acquired by an unauthorized party.

Following a comprehensive review, WIRX Pharmacy determined on Jan. 23, 2026, that these files contained sensitive information belonging to specific individuals.

The exposed data includes both personally identifiable information (PII) and protected health information (PHI): names, clinical information (such as diagnosis/conditions, medications, and other treatment details), demographic information (including Social Security numbers, addresses, dates of birth, and other identifiers), and financial account or claims information.

At this time, there is no public information regarding the identity of the perpetrator or the specific method used to access the data.

The incident was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Feb. 12, 2026, with eight Massachusetts residents confirmed as impacted.

The company has posted a Notice of Data Event on their website.

WIRX Pharmacy's response

WIRX Pharmacy is offering complimentary credit monitoring and identity protection services through Experian to those affected. Impacted individuals have been provided with instructions on how to enroll in these services, which include identity restoration support and credit monitoring for a specified period.

WIRX Pharmacy encourages all potentially affected individuals to remain vigilant by monitoring account statements, explanation of benefits, and free credit reports for any suspicious activity.

The company has also provided detailed guidance on placing fraud alerts or credit freezes with the major credit bureaus, as well as contact information for reporting identity theft or fraud to the appropriate authorities.

The company is reviewing its existing policies and procedures to strengthen information security and reduce the risk of similar incidents in the future.

For more information, individuals can call the dedicated assistance line at 833-918-1152, Monday through Friday, 9 a.m. to 9 p.m. Eastern Time.