PharMerica

PharMerica, operating under its alias, is a healthcare organization headquartered in the United States of America. The organization handles sensitive patient information, including names, Social Security numbers, dates of birth, addresses, medication details, and health insurance data, as demonstrated by the 2023 ransomware incident. In March 2023, PharMerica and its parent company, BrightSpring Health Services, were targeted by the Money Message ransomware group. The attackers gained unauthorized access to the network, exfiltrated a substantial volume of data, and subsequently leaked the stolen information on public forums. The breach reportedly affected anywhere from hundreds of thousands to millions of individuals. Following the incident, BrightSpring Health Services engaged cybersecurity experts to investigate and contained the breach while maintaining operational continuity.

The parent company also offered identity protection services to those whose data was compromised. The ransomware group claimed to have extracted terabytes of data during the attack. PharMerica’s status as a subsidiary of BrightSpring Health Services is explicitly noted in the reporting of the incident. These events highlight the organization’s exposure to significant cyber‑threat risks within the healthcare sector. The headquarters location in the United States situates PharMerica within a highly regulated healthcare environment. No further quantitative details about the organization’s size, market reach, or specific product lines are provided in the available sources.