Custom Rx Shoppe Data Breach

Custom Rx Shoppe, a Washington-based independent pharmacy that also provides long-term care pharmacy and compounding services, may have experienced a data breach. A hacker group known as The Gentlemen has claimed responsibility for an attack on the company, raising concerns for current and former patients and staff whose personal information may have been stored in the pharmacy’s systems. Because companies that handle sensitive health and prescription information have a responsibility to keep it secure, any confirmed lapse could expose those affected to real and lasting harm.

Custom Rx Shoppe’s Data Breach Investigation

According to a September 30, 2026 post on a dark web monitoring site, the hacker group The Gentlemen claimed to have breached Custom Rx Shoppe, estimating the intrusion occurred the day prior. A separate cybersecurity blog similarly reported that The Gentlemen claimed responsibility for an attack on the pharmacy. As of this writing, Custom Rx Shoppe has not publicly confirmed the incident, and no further detail about how the alleged attack occurred, what systems were involved, or the exact timeline has been made available beyond the leak-site posting.

Ransomware and data-extortion groups like The Gentlemen typically claim victims on dark web leak sites after allegedly stealing data from a target’s network, often as leverage to pressure a ransom payment. Until an organization independently confirms such a claim or discloses the results of its own investigation, the scope and accuracy of what may have been taken generally cannot be verified by outside parties. Still, claims like this are frequently followed by an eventual public confirmation once a company’s forensic investigation concludes, particularly in the healthcare and pharmacy sector, which handles some of the most sensitive categories of personal data and has become a frequent target for ransomware operators.

Independent pharmacies and healthcare-adjacent businesses are attractive targets for these groups because they often store years of patient records, insurance information, and payment details, yet may have fewer dedicated cybersecurity resources than large hospital systems or national pharmacy chains. When a breach at a business like this is confirmed, notification laws in most states generally require the affected company to notify individuals whose personal information was involved within a defined window, along with reporting to state regulators depending on the number of residents affected.

Because Custom Rx Shoppe provides both retail and long-term care pharmacy services, including to nursing homes and assisted-living facilities, a confirmed breach could potentially touch a broad population, ranging from everyday retail customers to vulnerable long-term care residents whose medication records may be especially sensitive. People who have filled a prescription, received compounded medication, or interacted with the pharmacy’s long-term care services should watch for any official notification from the company and monitor their accounts and records for signs of misuse in the meantime.

When Did This Breach Occur?

The Gentlemen’s leak-site posting, dated September 30, 2026, estimated that the intrusion occurred on September 29, 2026. Custom Rx Shoppe has not publicly confirmed this timeline, and an official notification, if and when issued, may specify a different date of discovery or a broader window during which unauthorized access could have occurred.

What Information Was Breached?

At this time, the specific categories of information involved in the alleged Custom Rx Shoppe breach have not been publicly disclosed. Given that the company operates a retail pharmacy, a long-term care pharmacy, and a compounding lab, information that is typically stored by a business of this kind can include patient names, contact details, dates of birth, prescription and medication records, insurance information, and in some cases Social Security numbers or payment information. Affected individuals should watch for an official notice from the company confirming exactly what information, if any, was involved.

What You Can Do

If you believe you may have been affected by this incident, consider taking the following steps:

• Monitor your financial accounts and insurance statements for any unauthorized or unfamiliar activity.
• Review any correspondence from Custom Rx Shoppe carefully, and confirm its authenticity directly with the pharmacy before clicking links or sharing information.
• Consider placing a fraud alert or credit freeze with the major credit bureaus if you are concerned about identity theft.
• Watch for phishing attempts that reference this incident, and avoid sharing personal information in response to unsolicited messages.

File a Data Breach Lawsuit Against Custom Rx Shoppe

If it is later confirmed that your personal information was compromised in the Custom Rx Shoppe data breach, you may have legal options available to recover compensation for the harm you have suffered. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.