Merck Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Merck Sharpe & Dohme LLC data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Merck
Merck is a major multinational pharmaceutical company based in Rahway, New Jersey. The company focuses on developing and producing medicines, vaccines and animal health products.
What Happened?
In September 2025, Merck Sharpe & Dohme learned of a data breach involving one of its U.S.-based service providers, Graebel Companies Inc., which handles employee relocation management services.
The breach occurred when Graebel detected unauthorized access to its systems and promptly took steps to contain the incident and assess its impact.
After reviewing the affected files, Graebel notified Merck on Sept. 22, 2025, that the data of some current and former Merck employees was involved. Merck completed its own review by Oct. 20, 2025, confirming that certain individuals’ information had been impacted.
The breach was reported to the Massachusetts Attorney General’s office on Nov. 17, 2025. The full extent of the breach is not yet known, but it could be significant. The company is mailing notices to affected individuals.
Possible Information Exposed
- Name
- Date of Birth
- Address
- Phone number
- Social Security number
- Financial account information
Your Rights and Next Steps
If you received a data breach notification from Merck, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Identity theft protection services: Sign up for the free Cyberscout identity theft protection services offered by Merck.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your information was exposed in the Merck data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are ready to help you take the next steps. To find out if you qualify and to join a lawsuit, complete the form below.
.png)