Ridgeway Pharmacy Ltd data breach
Ridgeway Pharmacy Ltd reported a data breach on September 21, 2026, impacting individuals in California. The incident exposed sensitive information, including Full Name, Date of Birth, Social Security Number, and Prescription Information. If you received a notification, your private data may be at risk and you could be eligible for a free case review.
Docket sheet
- Company
- Ridgeway Pharmacy Ltd
- Venue
- California Attorney General
- Filed
- September 21, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJune 7, 2026
Date of the incident as stated in the filing.
- 2
Reported to the California Attorney GeneralSeptember 21, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Prescription Information
- Health Insurance ID Number
- Medical Record Number
- Billing and Payment Details
- Home Address
Clerk's notes
Ridgeway Pharmacy Ltd, a community and specialty pharmacy provider in California, publicly disclosed a data security incident on September 21, 2026. This breach, which occurred on June 7, 2026, involved unauthorized access to the company's network environment. The investigation into the incident is currently monitoring the situation.
The compromised data categories include highly sensitive personal and health-related information. Exposed records specifically include Full Name, Date of Birth, Social Security Number, Prescription Information, Health Insurance ID Number, Medical Record Number, Billing and Payment Details, and Home Address. As a pharmacy, Ridgeway Pharmacy Ltd routinely handles extensive confidential data crucial for patient care and billing.
Such a combination of exposed data creates significant risks for affected individuals. The compromise of Prescription Information, Medical Record Number, and Health Insurance ID Number can lead to medical identity theft, where unauthorized parties might attempt to obtain prescriptions or bill for services. Separately, the exposure of Full Name, Date of Birth, Social Security Number, and Billing and Payment Details makes victims vulnerable to financial fraud and traditional identity theft.
Handling patient data obligates Ridgeway Pharmacy Ltd to adhere to strict federal and California state regulations, including the Health Insurance Portability and Accountability Act (HIPAA), the California Confidentiality of Medical Information Act (CMIA), and the California Consumer Privacy Act (CCPA). These laws mandate rigorous safeguards for electronic protected health information. A breach of this magnitude raises questions regarding compliance with these legal obligations.
If you received a data breach notification letter from Ridgeway Pharmacy Ltd, your personal and medical information was involved in this security incident. Individuals who have been notified may be able to pursue legal recourse to address the unauthorized exposure of their data. We are actively investigating potential claims related to this incident and invite affected individuals to request a free case review to understand their options, with no out-of-pocket costs unless we secure compensation.
If a notification letter about this breach reached you, see every California data breach on file or browse all cases.
Other California docket entries
- ZZ Diag ProbeCalifornia AG—Monitoring
- STS Aviation GroupCalifornia AGOctober 19, 2026Monitoring
- Citizens BankCalifornia AGOctober 19, 2026Monitoring
- John G. Yphantides, a Professional Law CorporationCA AGOctober 16, 2026Monitoring
- Neuro Wellness SpaCalifornia AGOctober 16, 2026Monitoring
- Frazer LLPCalifornia AGOctober 16, 2026Monitoring
- Covered CaliforniaCalifornia AGOctober 16, 2026Monitoring
- Inner City Education FoundationCA AGOctober 16, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.