What Is This About?

If you recently received a letter or an email from Morton Drug Company (“MDC”) informing you that your sensitive personal and protected health information was compromised in a data breach, we would like to speak with you about your rights and potential legal remedies. MDC recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

On or about August 20, 2025, Morton Drug Company became aware of a security incident affecting its internal IT systems. Upon detection, MDC launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation concluded on or around October 21, 2025, and concluded that an unauthorized third party had gained access to MDC’s systems and obtained certain data, including personal and health-related information. MDC posted a notice of data security incident on its website on Nov. 7, 2025, and disclosed the breach to the U.S. Department of Health and Human Services on November 10, 2025.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal and protected health information may have been compromised:

• Name;
• Address;
• Prescription Information; and
• Social Security Number.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from Morton Drug Company, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.