PharMerica $5.28M Data Breach Class Action Settlement
PharMerica $5.28M Data Breach Class Action Settlement

Individuals residing in the United States who received notice of the PharMerica data breach may be eligible to claim up to $10,000 plus other benefits from a class action settlement. The breach compromised customer names, dates of birth, Social Security numbers, medication lists and health insurance information.

PharMerica Corp. agreed to pay $5,275,000 to settle a class action lawsuit alleging it failed to protect personally identifiable or protected health information following a significant data breach in March 2023. The cybersecurity incident impacted as many as 5.8 million people.

Who are the class members?

Class members are individuals living in the United States who received an official notice informing them the March 2023 PharMerica data breach compromised their personal and medical information.

How much can class members get?

All class members will automatically receive one year of Kroll Complete Monitoring, which includes credit monitoring, dark web monitoring, payday loan monitoring, Social Security scan, fraud consultation, identity theft restoration services, $1,000,000 identity theft and fraud insurance coverage with no deductible, credit score reporting and real-time inquiry alerts.

Class members can submit a claim for one or both of following cash payment options:

  • Cash payment A – Documented losses: Class members may claim up to $10,000 in documented losses that are fairly traceable to the data breach. This may include unreimbursed expenses related to fraud or identity theft; professional fees, such as those for attorneys, accountants or credit repair services,;costs to freeze or unfreeze credit, credit monitoring costs incurred after the breach; and other miscellaneous expenses or fees.
  • Cash payment B – Pro rata cash: Class members can also submit a claim to receive a pro rata cash payment from the net settlement fund. The settlement administrator will determine the final payment amount by the number of claims filed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Settlement Administrator - 83343, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

The claim deadline is April 27, 2026.

Required proof and claim information

  • All claims require the class member ID from the class member's settlement notice.
  • Documented losses claims require supporting documentation, which may include receipts, bills, invoices, bank or credit card statements showing unreimbursed fees or charges due to fraud and any other proof of identity theft or fraud.

Payout options

  • Electronic payment (online claims only)
  • Paper check mailed to the address provided

$5.28 million data breach settlement fund

The $5,275,000 settlement fund will include:

  • Settlement administration costs: To be determined
  • PharMerica’s data-mining costs: To be determined
  • Attorneys' fees: Up to $1,740,750
  • Attorneys' expenses: To be determined
  • Service awards to class representatives: Up to $3,500 each
  • Cash payment B to approved claimants: Remaining settlement funds

PharMerica will pay documented loss claim payments, credit monitoring costs and an additional $1,741,000 in attorneys' fees separately from the above fund.

Important dates

  • Opt-out deadline: April 13, 2026
  • Claim form deadline: April 27, 2026
  • Final approval hearing: May 12, 2026

When is the PharMerica data breach settlement payout date?

The settlement administrator will issue payments and credit monitoring codes to class members approximately 105 days after the court grants final approval of the settlement.

Why did PharMerica settle this lawsuit?

The class action lawsuit alleged PharMerica failed to adequately protect sensitive personal and medical information, resulting in a cyberattack in March 2023. A cybercriminal group known as “Money Message” executed the breach, which exfiltrated 4.7 terabytes of data, including names, addresses, dates of birth, Social Security numbers, and customer medical or insurance information.

PharMerica denies the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

  1. Official class notice
  2. Official settlement website
  3. Official claim form
Settlement Open for Claims
Award:
Up to $10,000 plus other benefits
Deadline:
April 27, 2026
SUBMIT CLAIM