Ridgeway Pharmacy website breach exposes data of 258,920 customers; IMS Care Center and Persona Dental also disclose incidents
Ridgeway Pharmacy Ltd, a Victor, Montana mail order and community pharmacy, disclosed that a security incident involving its third-party designed and developed website exposed the personal and health information of 258,920 customers. The company became aware of the exposure on August 21, 2026. Forensic experts confirmed the incident was limited to the website and no internal systems were involved. The article also covers two smaller healthcare breaches: IMS Care Center (Phoenix, Arizona), where an email environment was accessed, and Persona Dental (Sartell, Minnesota), where a network intrusion affected 3,386 patients.
Detalhes técnicos
- Ridgeway Pharmacy: exposed data included names, addresses, dates of birth, prescription information, health information and insurance information. A subset of individuals also had payment card information exposed. The root cause was not described beyond the third-party built website.
- IMS Care Center: an unauthorized third party accessed the email system between June 17 and June 18, 2026, and suspicious activity was detected on June 18. On September 30, 2026 the practice confirmed that patient names, addresses, Social Security numbers and medical information had been exposed. Notification letters were mailed on October 16, 2026. The incident has not yet appeared on the OCR breach portal, so the number of affected individuals is unknown.
- Persona Dental: an unauthorized party accessed the network between April 28 and April 30, 2026. Exposed data included names, dates of birth, diagnosis and treatment information and health insurance information, plus Social Security numbers for some patients. Notification letters began on September 9, 2026.
Remediação
- Ridgeway Pharmacy reviewed its third-party website maintenance and security arrangements, switched to a new website platform, restricted access and strengthened monitoring. Affected individuals were offered credit monitoring and identity theft protection.
- IMS Care Center implemented new technical safeguards, Sophos MDR, geographical restrictions on email access, enhanced phishing training and updated policies. It offered at least 12 months of credit monitoring.
- Persona Dental secured its network, added security measures and offered credit monitoring to individuals whose Social Security numbers were exposed.
Linha do tempo
-
Ridgeway Pharmacy website breach exposes data of 258,920 customers; IMS Care Center and Persona Dental also disclose incidents
ler a análise desta fonte ocultar
Ridgeway Pharmacy Ltd, a Victor, Montana mail order and community pharmacy, disclosed that a security incident involving its third-party designed and developed website exposed the personal and health information of 258,920 customers. The company became aware of the exposure on August 21, 2026. Forensic experts confirmed the incident was limited to the website and no internal systems were involved. The article also covers two smaller healthcare breaches: IMS Care Center (Phoenix, Arizona), where an email environment was accessed, and Persona Dental (Sartell, Minnesota), where a network intrusion affected 3,386 patients.
Technical Details
- Ridgeway Pharmacy: exposed data included names, addresses, dates of birth, prescription information, health information and insurance information. A subset of individuals also had payment card information exposed. The root cause was not described beyond the third-party built website.
- IMS Care Center: an unauthorized third party accessed the email system between June 17 and June 18, 2026, and suspicious activity was detected on June 18. On September 30, 2026 the practice confirmed that patient names, addresses, Social Security numbers and medical information had been exposed. Notification letters were mailed on October 16, 2026. The incident has not yet appeared on the OCR breach portal, so the number of affected individuals is unknown.
- Persona Dental: an unauthorized party accessed the network between April 28 and April 30, 2026. Exposed data included names, dates of birth, diagnosis and treatment information and health insurance information, plus Social Security numbers for some patients. Notification letters began on September 9, 2026.
Remediation
- Ridgeway Pharmacy reviewed its third-party website maintenance and security arrangements, switched to a new website platform, restricted access and strengthened monitoring. Affected individuals were offered credit monitoring and identity theft protection.
- IMS Care Center implemented new technical safeguards, Sophos MDR, geographical restrictions on email access, enhanced phishing training and updated policies. It offered at least 12 months of credit monitoring.
- Persona Dental secured its network, added security measures and offered credit monitoring to individuals whose Social Security numbers were exposed.