VICTOR, Mont., Sept. 29, 2026 (GLOBE NEWSWIRE) — Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from the Ridgeway Pharmacy, Ltd. data breach. Ridgeway Pharmacy’s vendor-built website was accessed by an unauthorized party. Ridgeway has notified affected individuals and reported the incident to the California Attorney General.
Key Facts at a Glance
- Company: Ridgeway Pharmacy, Ltd. — a pharmacy based in Victor, Montana.
- What happened: An unauthorized party exploited a vulnerability in Ridgeway’s vendor-built website. Ridgeway’s internal systems were not involved.
- When: Ridgeway determined on August 21, 2026, that personal information may have been involved; notice is dated September 21, 2026.
- People affected: Not publicly disclosed; those affected appear to be customers who used Ridgeway’s pharmacy website.
- Information exposed: Names, addresses, dates of birth, health and insurance information, prescription information, and — for some individuals — payment card information. Social Security numbers and driver’s license numbers were not involved.
What Happened
With assistance from external cybersecurity and forensic specialists, Ridgeway determined that a vulnerability in its vendor-supported website allowed an unknown third party to access it using elevated privileges, and that personal information may have been affected as of August 21, 2026. The company reported the incident to federal law enforcement, rebuilt the website on a new platform, strengthened access controls, reviewed its vendor arrangements, and notified the California Attorney General. Ridgeway states its internal systems were not involved.
What Information Was Exposed
The compromised data may include names, addresses, dates of birth, health information, insurance information, prescription information, and, for some individuals, payment card information. Ridgeway states that Social Security numbers and driver’s license numbers were not involved. Even so, this combination carries a real risk of medical identity theft, insurance fraud, financial fraud, and targeted phishing.
Your Legal Options
Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of individuals whose sensitive personal and health data may have been compromised. The firm is examining whether Ridgeway and its vendor implemented reasonable cybersecurity safeguards and whether additional measures could have prevented or reduced the breach’s impact. The firm will evaluate your rights and potential claims at no cost.
Recommended Protective Steps
- Preserve your breach notification letter and any reference or code it contains.
- Review insurance statements and explanation-of-benefits notices for any care, prescriptions, or claims you do not recognize.
- Monitor bank and card statements for unauthorized charges, and consider a fraud alert or security freeze.
- Be cautious of phishing messages that reference your prescriptions or pharmacy account.
Contact Us for a Free Case Evaluation
Speak confidentially with a data privacy attorney today: Marc Edelson, Esq., Edelson Lechtzin LLP, 411 S. State Street, Suite N-300, Newtown, PA 18940; Phone: 844-696-7492; Email: medelson@edelson-law.com; Web: www.edelson-law.com. To request a free consultation, click HERE.
About Edelson Lechtzin LLP
Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. In addition to data breach litigation, the firm handles class and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud.
Legal Notice: This press release may be considered Attorney Advertising in some jurisdictions.
