Ridgeway Pharmacy, a Victor, Montana-based mail-order and community pharmacy, has notified almost 259,000 individuals that personal and protected health information was exposed through its third-party designed and developed website. The company became aware of the exposure on 21 August 2026 and engaged digital forensics specialists, who confirmed the incident was limited to the website and that no internal systems were involved. Exposed data included names, addresses, dates of birth, prescription information, health information and insurance information, with payment card data affected for a subset of individuals. Ridgeway has moved to a new website platform, restricted access and strengthened monitoring, and is offering complimentary credit monitoring and identity theft protection. The same notification round covered IMS Care Center in Arizona and Persona Dental in Minnesota, continuing a run of small-provider healthcare breaches.

• Source article