Breaches and incidents
Ridgeway Pharmacy (Victor, Montana): vendor-built website breached, 258,920 customers
Ridgeway’s letter dated 21 Sep 2026 says it learned on 21 Aug 2026 that its website, “designed and developed by a third-party vendor”, was accessed by an...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Ridgeway’s letter dated 21 Sep 2026 says it learned on 21 Aug 2026 that its website, “designed and developed by a third-party vendor”, was accessed by an unauthorized party; address, date of birth, health, insurance, payment card and prescription information may be involved, and internal systems were not. HIPAA Journal reports 258,920 customers were affected; the California AG listing gives a breach date of 7 Jun 2026.
- Root cause: compromise of the vendor-built website; specifics not disclosed.
- No attacker named.
- Ridgeway reported to federal law enforcement, moved to a new website platform, restricted access, strengthened monitoring and offers credit monitoring.