Individuals who received notice of the PharMerica data breach may be eligible to claim up to $10,000 plus free credit monitoring from a class action settlement.
If your personal information was compromised in the PharMerica data breach, a $5,275,000 settlement fund is now open for claims. PharMerica Corporation – a nationwide pharmacy services provider – agreed to resolve a class action lawsuit tied to a March 2023 ransomware attack that exposed the personal and medical data of people in its system.
The company denies any wrongdoing but chose to settle rather than face a drawn-out trial. The result: real money available to people who were affected – and you don’t need a lawyer or extensive paperwork to get it.
Who can file a claim?
The PharMerica data breach settlement is open to all living persons in the United States who were provided notice of the Data Incident. Specifically, you may be eligible if:
- You reside in the United States and your personal information was potentially exposed in the March 2023 ransomware attack on PharMerica.
- You received a data breach notification from PharMerica or the settlement administrator informing you that your data may have been compromised.
- Your compromised data may have included names, addresses, dates of birth, Social Security numbers, or medical and health insurance information.
Affected by the PharMerica data breach? You may be eligible for up to $10,000 plus free credit monitoring.
File Your Claim NowHow much can class members receive?
Class members can claim several types of awards from the PharMerica data breach settlement, depending on their circumstances and the documentation they provide:
- Pro rata cash payment: Estimated $100-$200 per person from the net settlement fund. No documentation required – every eligible class member can claim this simply by filing a valid claim form.
- Documented losses: Up to $10,000 for out-of-pocket expenses caused by the data breach – fraud and identity theft losses, professional fees, credit-related costs, and monitoring expenses. Requires receipts or third-party documentation to support the claim.
- Credit monitoring: One year of Kroll Complete Monitoring with $1,000,000 in identity theft insurance. No documentation required – available to all eligible class members who file a claim.
How to claim a data breach payment
Class members can submit the online claim form or download, print, complete and mail the PDF claim form available on the settlement website to the administrator. The claim deadline is April 27, 2026.
PharMerica Data Breach Settlement, c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391
Phone: 833-754-6609
What proof or documentation is necessary to submit a claim?
- Pro rata cash payment: No documentation required. Simply submit a valid claim form before the deadline.
- Documented losses (up to $10,000): Requires receipts, invoices, bank statements, or other third-party records showing out-of-pocket expenses tied to the data breach. Self-prepared documents are not sufficient.
- Credit monitoring: No documentation required. Select this option on the claim form and enrollment details will be sent after final approval.
Payout options
- Physical check (for mailed claim forms)
- Electronic payment (for online claim forms)
Settlement fund breakdown
The $5,275,000 settlement fund covers:
When is the PharMerica settlement payout date?
The settlement administrator will issue payments after the court grants final approval at the May 12, 2026 fairness hearing and resolves any appeals. No specific payout date has been announced – this is standard at this stage of the process.
Payouts typically begin 60-90 days after final approval, assuming no appeals are filed. If the settlement is appealed, the timeline can extend by several months or longer.
Why did this class action settlement happen?
The class action lawsuit alleged PharMerica Corporation suffered a ransomware attack in March 2023 that exposed the personal and medical information of individuals in its pharmacy services system. The plaintiffs claimed PharMerica failed to implement adequate cybersecurity measures to protect sensitive data including Social Security numbers and health insurance information.
PharMerica denies any wrongdoing but agreed to pay $5,275,000 to settle the case and avoid the uncertainty and expense of continued litigation.
Is the PharMerica data breach settlement legitimate?
Yes – this is a fully court-supervised settlement. Here’s what confirms it:
- Case number: 3:23-cv-00297-RGJ-CHL, filed in the U.S. District Court for the Western District of Kentucky
- Administrator: Kroll Settlement Administration LLC, an independent third party
- Official site: pmcsettlement.com
- Notice: Sent directly by the administrator – not by PharMerica
The settlement is pending final court approval at the May 12, 2026 fairness hearing. Claims must be filed before April 27, 2026 – no payments will be issued before final approval.
How much will I actually receive from the PharMerica settlement?
It depends on two things: what you claim and how many people file. The net settlement fund is split among all valid claimants after deducting administration costs, attorney fees, and service awards.
- $100-$200 estimated (no docs needed) – the pro rata cash payment. The exact amount depends on how many people file valid claims.
- Up to $10,000 (documented losses) – requires receipts or third-party records for fraud, identity theft, credit costs, or monitoring expenses caused by the breach.
- Credit monitoring – one year of Kroll Complete Monitoring with $1,000,000 identity theft insurance, no documentation required.
The $10,000 headline figure is the theoretical maximum for documented losses. Most people will receive the pro rata cash payment plus credit monitoring – which is still worth filing for given that no documentation is required.
What actually happened in the PharMerica data breach?
In March 2023, PharMerica Corporation – a nationwide pharmacy services provider – was hit by a ransomware attack that compromised its computer systems and exposed the personal information of individuals in its records.
What was exposed: Names, addresses, dates of birth, Social Security numbers, and medical and health insurance information. This is among the most sensitive categories of personal data, combining both financial identifiers and protected health information.
What the lawsuit claims: That PharMerica failed to implement reasonable cybersecurity measures to protect the data in its care, leaving it vulnerable to the ransomware attack.
What PharMerica says: They deny any wrongdoing – but agreed to a $5,275,000 settlement rather than face trial.
Why do companies settle data breach lawsuits even when they deny wrongdoing?
Settlement does not mean admission of guilt. Companies settle for practical reasons:
- Litigation is expensive – legal fees alone can exceed the settlement amount
- Trials are unpredictable – a verdict could result in a far larger payout
- Settling ends years of ongoing litigation and negative press
- For plaintiffs, it guarantees a payout rather than risking nothing at trial
Courts still review every class action settlement to confirm it’s fair and reasonable – that’s what the May 12, 2026 fairness hearing is for. Denying wrongdoing while settling is standard practice and has no effect on your right to file a claim.