Ridgeway Pharmacy reports hacking affecting 258,920 patients
Ridgeway Pharmacy, Ltd, a healthcare provider in Montana, filed a breach report with HHS OCR on 09/21/2026. The incident involved a hacking or IT incident targeting a network server. The filing indicates that 258,920 individuals were affected. The breach was reported via the web portal. This submission date reflects when the report was filed, not when the breach occurred. Healthcare administrators should review this filing for context on sector-wide risks, though obligations differ for covered entities versus business associates.
Sources differ:
- The HHS breach portal lists the breach location as 'Network Server, Other'. HIPAA Journal and other reports describe a vulnerability in the pharmacy's third-party-built website.