> Cause not stated in filing
NationalRx Pharmacy Network data breach investigation
- Filed
- June 20, 2026
- Regulator
- Pennsylvania AG
- People affected
- 620,000
- File status
- Investigation Open
What the filing confirms
- NationalRx Pharmacy Network reported the incident to the Pennsylvania Attorney General.
- 620,000 people were notified.
- Information involved: Medical Records, SSN, Prescription History.
Still unknown
- What caused the incident beyond the description in the filing.
- How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Investigation notes
NationalRx Pharmacy Network has formally reported a major cybersecurity incident to the Pennsylvania Attorney General regarding a breach that compromises the personal and medical information of 620,000 pharmacy customers. As a healthcare network managing sensitive pharmaceutical services, the company stored deeply private data that fell into unauthorized hands during the security failure. This official filing places the incident among the most serious healthcare data breaches reported in Pennsylvania this year, prompting a formal investigation by the state attorney general. The compromise of your medical records, Social Security number, and detailed prescription history creates severe risks for identity theft and financial fraud. Because cybercriminals now possess your complete prescription records and medical files alongside your Social Security number, they have the exact combination of data needed to open fraudulent credit accounts, impersonate you for medical services, or access your healthcare benefits. This level of exposure goes far beyond a standard password leak, putting your long-term personal security and financial well-being at ongoing risk. If you received a notification letter in the mail from NationalRx Pharmacy Network, you may be eligible to participate in a class action lawsuit to hold the company accountable. You can contact our firm today to receive a completely free, no-obligation case review with absolutely zero upfront fees.
What our attorneys examine
A cyberattack does not excuse a company from protecting the information it holds. We look at whether NationalRx Pharmacy Network used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Pennsylvania.
NationalRx Pharmacy Network data breach questions
- How many people were affected by the NationalRx Pharmacy Network data breach, and what was exposed?
- NationalRx Pharmacy Network reported that about 620,000 people were affected and lists the following information as involved: Medical Records, SSN, Prescription History. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
- Is the NationalRx Pharmacy Network data breach letter legit or a scam?
- A notice from NationalRx Pharmacy Network in the mail matches the breach NationalRx Pharmacy Network reported to the Pennsylvania Attorney General on June 20, 2026, which covers about 620,000 people. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact NationalRx Pharmacy Network through a phone number or website you find yourself.
- Did NationalRx Pharmacy Network offer free credit monitoring?
- Check your letter from NationalRx Pharmacy Network. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Using the free service won't stop you from joining a lawsuit or settlement later.
- Is there a NationalRx Pharmacy Network data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against NationalRx Pharmacy Network. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- What should I do after getting the NationalRx Pharmacy Network data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Where can I see the official NationalRx Pharmacy Network breach notice?
- NationalRx Pharmacy Network's report is published by the Pennsylvania Attorney General: https://attorneygeneral.gov/pa/nationalrx-filing-2026 Compare it with the letter you received to confirm the dates and details match.
- Do I need a NationalRx Pharmacy Network data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
- Can I sue NationalRx Pharmacy Network over the data breach?
- It depends on what was exposed, the law in Pennsylvania and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- How much could a NationalRx Pharmacy Network data breach settlement or claim be worth?
- There is no set amount, and no NationalRx Pharmacy Network settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Medical Records, SSN, Prescription History as involved. Keep receipts and records; they're what damages claims are built on.
Other open files in Pennsylvania
- Bozeman School DistrictIndiana Attorney General · Filed date pendingCount not stated
- Bozeman School DistrictIN Attorney General · Filed date pendingCount not stated
- Teamsters Local 17Indiana Attorney General · Filed date pendingCount not stated
- Teamsters Local 17IN Attorney General · Filed date pendingCount not stated
- BankIndiana Attorney General · Filed date pendingCount not stated
- BankIN Attorney General · Filed date pendingCount not stated
Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.