Ridgeway Pharmacy Ltd experienced a third-party website security incident disclosed through a mailed notice dated September 21, 2026. The company states that its internal systems were not involved, and the incident related to a website developed and supported by a third-party vendor.
The incident affected 15 million patients. Exposed data types include name, date of birth, address, prescription information, health information, insurance information, and for some individuals, payment card information. Social Security numbers were not involved. The exact states affected have not been specified in the available official notice excerpts.
Additional details about the incident may emerge as investigations continue, and specific consumer notifications have been issued by the company.