Mercury Pharmacy Services, a division of Guardian Pharmacy of Washington, LLC, recently discovered a data breach affecting sensitive personal information. Though the full scope of the breach remains uncertain, it involved unauthorized access to a portion of the company’s computer network between November 12, 2025, and November 14, 2025.
Mercury Pharmacy Services’ Data Breach Investigation
On November 14, 2025, Mercury Pharmacy Services identified suspicious activity within its network. Upon detection, the company immediately took action to secure its systems and initiated an investigation, enlisting the help of a third-party cybersecurity firm to analyze the situation. The investigation confirmed that an unauthorized individual had accessed a limited area of Mercury’s computer network and may have copied certain files during the breach.
The compromised data includes potentially sensitive personal information such as names, addresses, and prescription details, but the breach did not involve Social Security numbers, financial information, or health benefits data. Although Mercury could not confirm exactly what information was accessed or copied, the company issued notifications as a precautionary measure.
Mercury took swift action to notify impacted individuals and the media about the breach. As of January 13, 2026, the company posted substitute notices on its website and issued notifications to potentially affected individuals in Washington.
Mercury’s response to this breach includes implementing additional security measures and reviewing its data protection policies. While the company is unaware of any misuse of the exposed data, the incident has raised concerns about the vulnerability of patient information within healthcare-related networks.
When Did This Breach Occur?
-
The suspicious activity was detected on November 14, 2025.
-
The investigation confirmed unauthorized access between November 12, 2025, and November 14, 2025.
-
Notification to impacted individuals was provided on January 13, 2026.
What Information Was Breached?
The data potentially affected by this breach includes:
-
Full names
-
Addresses
-
Prescription information
Notably, the compromised data did not include:
What You Can Do
If you believe you were impacted by the Mercury Pharmacy Services data breach, take the following steps to protect your personal information:
-
Monitor account statements: Review your financial records and health insurance accounts for any unusual activity.
-
Check Explanation of Benefits (EOB) forms: Ensure that there are no discrepancies in your healthcare services or claims.
-
Report suspicious activity: Contact the organization that issued any suspicious records to investigate and resolve any issues.
-
Stay vigilant: If you notice any unauthorized transactions or accounts opened in your name, take immediate action by reporting it to the institution.
While Mercury has not identified any misuse of the compromised data, it encourages all affected individuals to remain vigilant and safeguard their information. Mercury is also providing additional resources and guidance to help mitigate potential risks.
File a Data Breach Lawsuit Against Mercury Pharmacy Services
If you were notified about the Mercury Pharmacy Services data breach, or if you believe your data was exposed, you may be entitled to compensation. Data breaches involving personal health information can lead to identity theft, fraud, and long-term consequences for those affected.
Joining a class action lawsuit can provide an opportunity to hold Mercury accountable for the breach, and it may help victims recover damages related to credit monitoring, fraud protection, and other costs incurred due to the breach.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve received notice about this breach or discovered that you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
