• September 2026 •

MedImpact Healthcare Systems Data Breach

Last Updated on September 25, 2026

If your information was compromised in the MedImpact data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the MedImpact data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the MedImpact data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the MedImpact breach.

MedImpact Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the MedImpact data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the MedImpact data breach or otherwise believe they are affected.

MedImpact Security Incident: What Happened?

MedImpact Healthcare Systems, the nation's largest independent pharmacy benefit manager and health solutions company, has reported a data breach involving sensitive personal and health information.

According to a notice posted to its website, MedImpact identified unauthorized activity within certain systems in its environment on October 18, 2025. After investigating with cybersecurity experts and reviewing potentially impacted data, MedImpact determined on July 17, 2026, that the data set connected to the incident included certain individuals' information.

Personal information that was potentially exposed in the MedImpact Healthcare Systems data breach, varying by individual, included names, addresses, dates of birth and Social Security numbers. The incident also may have affected some health-related information, including prescription information, treatment information (such as dates of service, locations and provider names), insurance identification numbers and subscriber numbers.

MedImpact clients were notified of the incident on August 13, and individuals potentially affected by the MedImpact data breach were mailed notices on behalf of its clients starting on September 23.

What You Can Do After the MedImpact Data Breach

If your information was exposed in the MedImpact data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, lost time, out-of-pocket costs, and more.

A successful case could also force MedImpact to ensure they take proper steps to protect the information they were entrusted with.

Affected by the MedImpact data breach? Fill out the form on this page today.

Impacted Data:

• Social Security Number

• Date of Birth

• Address

• Treatment Information

• Prescription Information

• Provider Name

• Subscriber Number

• Name

• Health-Related Information