PITTSBURGH, Dec. 08, 2025 (GLOBE NEWSWIRE) -- Morton Drug Company (“MDC”),1 recently announced a cybersecurity incident , which impacted the personal information of over forty thousand individuals. Lynch Carpenter, LLP is investigating claims against MDC related to this data breach. For an attorney to review your case, visit our site HERE .
In the incident, an unauthorized person gained access to MDC’s network and may have acquired records containing personally identifiable information (“PII”) and protected health information (“PHI”) that includes individuals’ names in combination with:
address
prescription information
Social Security number
If your information was impacted in this incident, you may be entitled to compensation. For an attorney to review your case, visit our site HERE .
If you have received any other data breach notice letters in the last 30 days, please contact us here .
About Lynch Carpenter
Lynch Carpenter is a national class action law firm with offices in Pennsylvania, California, and Illinois. Our firm has represented millions of clients in data privacy matters for more than a decade and has earned national acclaim for complex litigation for plaintiffs across the country. To learn more, please visit www.lynchcarpenter.com .
For more information, please call Jerry Wells at (412) 322-9243, or email him at [email protected] .
CONTACT Jerry Wells
COMPANY Lynch Carpenter LLP
PHONE (412) 322-9243
EMAIL [email protected]
WEB lynchcarpenter.com
Morton LTC cybersecurity rating report: https://www.rankiteo.com/company/morton-ltc
"id": "MOR1765232510",
"linkid": "morton-ltc",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'incident': {'affected_entities': [{'customers_affected': '40,000+',
'industry': 'Healthcare/Pharmaceutical',
'location': 'Pittsburgh',
'name': 'Morton Drug Company (MDC)',
'size': None,
'type': 'Company'}],
'customer_advisories': 'Individuals impacted may be entitled to '
"compensation. Visit Lynch Carpenter's "
'site for case review.',
'data_breach': {'data_encryption': None,
'data_exfiltration': None,
'file_types_exposed': None,
'number_of_records_exposed': '40,000+',
'personally_identifiable_information': ['Name',
'Address',
'Social '
'Security '
'number',
'Prescription '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally '
'identifiable '
'information (PII)',
'Protected health '
'information '
'(PHI)']},
'date_publicly_disclosed': '2025-12-08',
'description': 'Morton Drug Company (MDC) announced a '
'cybersecurity incident impacting the personal '
'information of over forty thousand individuals. '
'An unauthorized person gained access to MDC’s '
'network and may have acquired records containing '
'personally identifiable information (PII) and '
'protected health information (PHI).',
'impact': {'brand_reputation_impact': None,
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': 'Personally identifiable '
'information (PII) and protected '
'health information (PHI)',
'downtime': None,
'financial_loss': None,
'identity_theft_risk': 'High',
'legal_liabilities': None,
'operational_impact': None,
'payment_information_risk': None,
'revenue_loss': None,
'systems_affected': None},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': None,
'entry_point': None,
'high_value_targets': None,
'reconnaissance_period': None},
'investigation_status': 'Ongoing (Lynch Carpenter, LLP)',
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'references': [{'date_accessed': '2025-12-08',
'source': 'Globe Newswire',
'url': None}],
'regulatory_compliance': {'fines_imposed': None,
'legal_actions': 'Investigation by '
'Lynch Carpenter, LLP',
'regulations_violated': None,
'regulatory_notifications': None},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': None,
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'title': 'Morton Drug Company Data Breach',
'type': 'Data Breach'}}