MedImpact Healthcare Systems Inc.

Profile narrative

MedImpact Healthcare Systems Inc. operates as a pharmacy benefit management company providing services to health plans, self-insured employers, and government entities across the United States. The organization manages prescription drug benefits for millions of members nationwide, functioning as an intermediary between payers, pharmacies, and pharmaceutical manufacturers to administer pharmacy benefits, process claims, and negotiate drug pricing. Its client base includes employer-sponsored health plans such as the Legget & Platt Employee Benefits Plan, as well as government programs and commercial health insurers seeking to control pharmacy spending while maintaining member access to medications.

Headquartered in the United States, MedImpact occupies a significant position within the pharmacy benefit management sector, an industry characterized by complex regulatory oversight and substantial data-handling responsibilities involving protected health information and personally identifiable information. The company's operational scope requires compliance with healthcare privacy regulations including HIPAA, as well as state-level data protection laws, given its role in processing sensitive member data across multiple jurisdictions. Its specialization in pharmacy benefit administration distinguishes it from broader health insurance carriers, focusing specifically on the pharmaceutical supply chain's financial and clinical management aspects. The organization's role as a pharmacy benefit manager places it at the intersection of healthcare delivery, insurance administration, and pharmaceutical distribution networks.

In October 2025, MedImpact disclosed a data breach following the discovery of unauthorized activity within its systems, with the ransomware group Qilin claiming responsibility for the intrusion. The incident affected adult and minor dependent members of at least one employer-sponsored plan, prompting the company to secure affected systems, engage cybersecurity experts, and issue notification letters to impacted individuals through U.S. Mail with separate communications for parents and guardians of minor children. A dedicated phone line was established to address inquiries from those who received breach notifications, reflecting the organization's regulatory obligations for breach response and member communication.

Incidents

1 incident linked to this organisation.