Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringOregon AG filing · September 21, 2026

Ridgeway Pharmacy Ltd Data Breach Exposes Patient Data in Oregon

Ridgeway Pharmacy Ltd has reported a data breach impacting patient information, including sensitive medical details, to the Oregon Attorney General. Individuals who received a notification letter should understand the risks of identity theft and medical fraud posed by the exposed data and explore potential legal recourse.

This breach is real, not a scam. Ridgeway Pharmacy Ltd officially reported it to the Oregon Attorney General on September 21, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Ridgeway Pharmacy Ltd notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Oregon
Breach date
June 7, 2026
Reported
September 21, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Health Insurance ID Number
  • Prescription Information
  • Medical Record Number
  • Diagnosis and Treatment Information
  • Phone Number
  • Mailing Address

Ridgeway Pharmacy Ltd, a provider of community and clinical pharmacy services in Oregon, recently disclosed a data security incident. The company reported the breach to the Oregon Attorney General on September 21, 2026, stemming from an event that occurred on or about June 7, 2026. This incident highlights potential vulnerabilities in the security of deeply sensitive consumer and patient files managed by the pharmacy.

The breach exposed a critical range of personal and health-related information. The compromised data types include Full Name, Date of Birth, Social Security Number, Health Insurance ID Number, Prescription Information, Medical Record Number, Diagnosis and Treatment Information, Phone Number, and Mailing Address. The exposure of such comprehensive data can lead to serious risks for affected individuals, including identity theft and various forms of medical fraud, such as fraudulent billing or attempts to obtain controlled substances.

As a healthcare entity, Ridgeway Pharmacy Ltd is subject to stringent regulations like the Health Insurance Portability and Accountability Act (HIPAA), alongside Oregon state consumer protection laws. These mandates require covered entities to implement robust administrative, physical, and technical safeguards to protect electronic health information. A breach of this nature suggests that these crucial security protocols may have been insufficient, leaving patient data vulnerable.

Receiving a data breach notification letter from Ridgeway Pharmacy Ltd means your private information was involved in this security incident. This notification formally acknowledges the compromise and establishes your legal standing to pursue potential remedies. It is important to note that the mere exposure of sensitive data itself can constitute a compensable injury, and affected individuals may not need to wait until they experience direct financial loss to consider legal action.

If you received a notification letter, you may have legal options available. Our firm is currently investigating the Ridgeway Pharmacy Ltd data breach to determine whether affected individuals may be entitled to compensation. We offer a free, no-obligation case review to help you understand your rights and potential next steps without any out-of-pocket costs.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Oregon Attorney General filing

Related data breach cases

Ridgeway Pharmacy Ltd Data Breach 2026: What To Do Next