PharMerica Will Pay at Least $5.2M to Settle Hack Lawsuit

Ransomware Gang Money Message Claimed It Exfiltrated 4.7TB of Firm's Data Marianne Kolbasuk McGee (HealthInfoSec) • January 14, 2026

Pharmacy services firm PharMerica will pay at least $5.2 million - plus millions more to enhance its security - as part of a preliminary class action settlement approved Monday by a Kentucky federal judge. The lawsuit stems from a 2023 hacking incident the company reported as affecting 5.8 million individuals.

See Also: 2023 Ransomware Preparedness: Key Findings, Readiness and Mitigation

The consolidated proposed class action litigation alleged that PharMerica acted negligently in collecting and storing class members’ private information.

Ransomware group Money Message took responsibility for a March 2023 attack on PharMerica, stealing 4.7 terabytes of the company's ...