On April 12, 2024, AllCare Pharmacy (“AllCare”) filed a notice of data breach with the Attorney General of Montana after discovering that files containing confidential information were accessed by an unauthorized party. In this notice, AllCare explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, addresses, dates of birth, prescriptions, Social Security numbers, and credit card numbers. Upon completing its investigation, AllCare began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from AllCare Pharmacy, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the AllCare Pharmacy data breach. For more information, please see our recent piece on the topic here.

What Caused the AllCare Pharmacy Data Breach?

The AllCare Pharmacy data breach was only recently announced, and more information is expected in the near future. However, AllCare’s filing with the Attorney General of Montana provides some important information on what led up to the breach. According to this source, on September 21, 2024, AllCare detected and stopped a ransomware attack targeting the company’s computer network. While AllCare was able to stop the attack, it did result in an unauthorized party being able to access portions of the company’s computer network.

In response, AllCare secured its systems and then began working with a forensic investigation firm to investigate the incident. Ultimately, AllCare’s investigation confirmed that an unauthorized party was able to access certain files containing confidential patient information.

After learning that sensitive consumer data was accessible to an unauthorized party, AllCare Pharmacy reviewed the compromised files to determine what information was leaked and which consumers were impacted. AllCare completed this process on April 3, 2024. While the breached information varies depending on the individual, it may include your name, address, date of birth, prescription, Social Security number, and credit card number.

On April 12, 2024, AllCare Pharmacy sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About AllCare Pharmacy

AllCare Pharmacy is a pharmacy located in Arkadelphia, Arkansas. AllCare serves assisted living facilities and correctional institutions and operates a specialty pharmacy. AllCare Pharmacy employs more than 205 people and generates approximately $27 million in annual revenue.