PharMerica $5.28M Data Breach Class Action Settlement

Individuals residing in the United States who received notice of the PharMerica data breach, you may be eligible to claim up to $10,000 plus a share of additional cash and free credit monitoring from a class action settlement. The breach compromised customer names, dates of birth, Social Security numbers, medication lists and health insurance information.

PharMerica Corp. has agreed to pay $5,275,000 to settle a class action lawsuit for alleged failures to protect personally identifiable information or protected health information following a significant data breach in March 2023. The cybersecurity incident impacted as many as 5.8 million people.

Who are the class members?

Class members are individuals living in the United States who received an official notice informing them that their personal and medical information may have been compromised in the March 2023 PharMercia data breach.

How much can class members get?

All class members will automatically receive one year of Kroll Complete Monitoring, which includes credit monitoring, dark web monitoring, pay day loan monitoring, Social Security scan, fraud consultation, identity theft restoration services, $1,000,000 identity theft and fraud insurance coverage with no deductible, credit score reporting and real-time inquiry alerts.

Class members can submit a claim for one or both of following cash payment options:

• Cash payment A – Documented losses: Class members may claim up to $10,000 in documented losses that are fairly traceable to the data breach. This may include unreimbursed expenses related to fraud or identity theft, professional fees, such as attorneys or accountants, credit repair services, costs to freeze or unfreeze credit, credit monitoring costs incurred after the breach, and other miscellaneous expenses or fees.
• Cash payment B – Pro rata cash: Class members can also submit a claim to receive a pro rata cash payment from the net settlement fund. Final payment amount will be determined by the number of claims filed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail ito the settlement administrator.

Settlement administrator's mailing address: Settlement Administrator - 83343, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

The claim deadline is April 27, 2026.

Required proof and claim information

• Class Member ID from official settlement notice required to submit a claim.
• Documented losses claims require supporting documentation which may include receipts, bills or invoices, bank or credit card statements showing unreimbursed fees or charges due to fraud and any other proof of identity theft or fraud.

Payout options

• Electronic payment, available only for online claim submissions
• Paper check mailed to the address provided

$5.28 million data breach settlement fund

The $5,275,000 settlement fund will include:

• Settlement administration costs: To be determined
• PharMerica’s data mining costs: To be determined
• Attorneys' fees: Up to $1,740,750 from the settlement fund
• Attorneys' expenses: Reasonable costs reimbursed from the settlement fund
• Service awards to class representatives: Up to $3,500 each
• Cash payment B to approved claimants: Remaining settlement funds

Documented losses claim payments, credit monitoring and an additional $1,741,000 in attorneys' fees will be paid for directly by PharMerica.

Important dates

• Opt-out deadline: April 13, 2026
• Claim form deadline: April 27, 2026
• Final approval hearing: May 12, 2026

When is the PharMerica data breach settlement payout date?

Payments and credit monitoring codes will be issued to class members approximately 105 days after the court grants final approval of the settlement.

Why did PharMerica settle this lawsuit?

The class action lawsuit alleged that PharMerica failed to adequately protect sensitive personal and medical information, resulting in a cyberattack in March 2023. The data breach was carried out by a cybercriminal group known as “Money Message,” which exfiltrated 4.7 terabytes of data, including names, addresses, dates of birth, Social Security numbers, and medical or insurance information belonging to customers.

PharMerica denies the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

1. Official class notice
2. Official settlement website
3. Official claim form