National class-action law firms Edelson Lechtzin LLP have stated that they are providing free case assessments to individuals affected by the data breach MedImpact Healthcare Systems. This breach may have exposed names, social security numbers, and sensitive health information.
San Diego, September 26, 2026 / PRNewswire / -- This national class-action law firm is investigating data privacy claims related to data breaches by MedImpact Healthcare Systems and Inc. MedImpact is a private pharmacy benefits management company that serves millions of members nationwide. This breach exposed sensitive personal and health information of current and former members of pharmacy benefit plans managed by MedImpact and/or Elixir Solutions.
Key Points Summary
- Companies: MedImpact Healthcare Systems, Inc. They are among the largest independent pharmacy benefits management companies in the United States.
- Incident occurrence time: On MedImpact, on October 18, 2025, unauthorized activities were detected within its system, and the investigation was completed on July 17, 2026.
- Disclosure date: MedImpact notified affected customers on August 13, 2026, and began sending notifications to affected individuals on September 23, 2026.
- Number of affected individuals: Not publicly disclosed. The affected members include both adults and minor dependents, covering those under the impacted welfare programs, including Leggett & Platt, Inc. Employee Benefits Plan.
- Information leakage: Varies from person to person and may include names, social security numbers, as well as sensitive health information (see below).
Event Process
MedImpact discovered unauthorized activities in some of its systems on October 18, 2025, and subsequently protected the affected systems. It also hired cybersecurity experts to conduct an investigation. On October 27, 2025, a ransomware gang claimed responsibility, adding MedImpact to their dark web leak website, stating that they had stolen data and that this data would be made public unless a ransom was paid.
Which information was leaked?
The leaked data varies from person to person and may include names, addresses, dates of birth, social security numbers, subscriber and insurance identification numbers, as well as health-related information such as prescriptions, treatments, service dates, service locations, and names of providers. Due to the high sensitivity of social security numbers and protected health information, affected individuals are at long-term risk of identity theft, medical fraud, insurance fraud, and targeted phishing.
Legal Choice
Edelson Lechtzin LLP is investigating a potential class action to seek legal remedies for those whose sensitive personal and health data may have been compromised. The law firm is reviewing whether MedImpact implemented reasonable cybersecurity measures and whether additional steps could have been taken to prevent or mitigate the impact of this data breach. The firm will provide a free assessment of your rights and potential claims.
Suggested protective measures
- Keep your breach notification letter, and register for any free credit monitoring services that are provided to you.
- Monitor your account statements, credit reports, and benefit information ( explanation-of-benefits ) to check for any unauthorized activities.
- Consider setting up credit fraud alerts or security freezes for Equifax, Experian, and TransUnion.
- Beware of phishing calls, text messages, and emails related to this leak.
Contact us for a free case assessment.
You can communicate confidentially with data privacy lawyers today: Marc Edelson, Esq, Edelson Lechtzin LLP, 411 S., State Street, Suite N -300, Newtown, PA 18940; Phone: 844-696-7492; Email: [ email protected ]; or click HERE to apply for a free consultation.
About Edelson Lechtzin LLP
Edelson Lechtzin LLP is a national class-action law firm with offices in Pennsylvania and California. In addition to data breach lawsuits, the firm also handles class actions and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud.
Legal Statement:This press release may be considered advertising for lawyers in certain jurisdictions.
