PharMerica Data Breach Settlement: Eligibility, Claims, and Deadlines

If you received a notice about the March 2023 PharMerica data breach, you may be eligible for the PharMerica data breach settlement, which sets aside $5,275,000 for class members and offers up to $10,000 in reimbursement for documented losses plus one year of free credit monitoring. Claims must be submitted online or postmarked by April 27, 2026. Judge Rebecca Grady Jennings granted preliminary approval on January 12, 2026, and a final fairness hearing is set for May 12, 2026 in the Western District of Kentucky.¹

Who Qualifies

The settlement class covers all living persons in the United States who received a notice from PharMerica about the March 2023 data incident. Directors and officers of PharMerica, governmental entities, the presiding judge and her immediate family, and anyone who timely opts out are excluded.¹

The class is limited to living persons. That matters here because PharMerica serves nursing homes, assisted living facilities, and hospice programs, and a large share of the roughly 5.82 million affected individuals were deceased. Notification letters for those people were addressed to administrators or executors of their estates,² but the settlement notice does not provide a separate mechanism for estates to file claims.³

What You Can Claim

Three types of relief are available. You do not have to choose between them.

Pro rata cash payment. PharMerica is putting $5,275,000 into a non-reversionary fund. After settlement administration costs, data-mining expenses, service awards of up to $3,500 for each of the six class representatives, and a portion of attorneys’ fees are paid out, whatever remains is divided equally among class members who file a valid claim.¹ You must submit a claim form to receive this payment.³

Reimbursement of documented losses up to $10,000. Paid separately by PharMerica, this covers out-of-pocket costs traceable to the breach, including unreimbursed fraud or identity theft losses, credit repair fees, costs of freezing or unfreezing credit, credit monitoring you purchased between the breach and the claims deadline, and miscellaneous expenses such as postage and mileage. You need to attach supporting documentation to your claim.³

One year of Kroll Complete Monitoring. Every class member is automatically enrolled without filing a claim, though you do need to activate the service using the code provided to you. The package includes credit monitoring, dark web monitoring, payday loan monitoring, a Social Security number scan, fraud consultation, identity theft restoration services, real-time credit inquiry alerts, and $1,000,000 in identity theft insurance with no deductible.³

How to File a Claim

Claims can be submitted online or by mail through the settlement website at pmcsettlement.com. The claims administrator is Kroll Settlement Administration, LLC, which also operates a toll-free phone line for questions.¹ If you want a share of the cash payment, submit a claim form. If you want reimbursement for documented losses, attach receipts, statements, or other proof.³ Notices began going out to affected individuals around February 10, 2026.⁴

Key Deadlines

Opt-out or objection deadline: April 13, 2026, postmarked by this date.⁵
Claims filing deadline: April 27, 2026, submitted online or postmarked by this date.⁵
Final approval hearing: May 12, 2026 at 1:00 PM ET, at the federal courthouse in Louisville, Kentucky.⁵

What Happened in the Breach

Between March 12 and 13, 2023, an unauthorized party gained access to PharMerica’s computer systems. The company detected suspicious activity on March 14 and by March 21 had identified which individuals were affected and what data had been taken.⁶ The compromised information included names, addresses, dates of birth, Social Security numbers, medication lists, and health insurance details.⁷

PharMerica reported the incident to the Maine Attorney General and the U.S. Department of Health and Human Services Office for Civil Rights, listing 5,815,591 affected individuals.⁷⁸⁹

PharMerica has also committed to changing its business practices and improving its cybersecurity going forward, with one estimate putting security improvement costs at roughly $2.54 million and total exposure above $10 million once legal and administrative costs are counted.⁴

1
GovInfo. Lurry v. PharMerica Corporation, Memorandum Opinion
2
Dark Reading. PharMerica Leaks 5.8M Deceased Users PII, Health Information
3
ClassAction.org. PharMerica Settlement Notice
4
McKnight’s Senior Living. $5.3 Million Settlement in PharMerica Data Breach Gets Preliminary Approval by Federal Judge
5
PMC Settlement. In Re: PharMerica Data Breach Litigation Settlement
6
PharMerica. Data Privacy Incident
7
HIPAA Journal. Almost 6 Million Individuals Affected by PharMerica Data Breach
8
Malwarebytes. PharMerica Breach Impacts Almost 6 Million People
9
McKnight’s Long-Term Care News. PharMerica Agrees to Pay $5.3M in Major Data Breach