Travere Therapeutics, Inc., a San Diego-based biopharmaceutical company specializing in rare kidney and metabolic disorder treatments, experienced a data breach in October 2025 that exposed sensitive personally identifiable information (PII) of at least 50 current and former employees in Massachusetts. The compromised data included names, dates of birth, addresses, Social Security numbers, phone numbers, and email addresses highly sensitive details that could facilitate identity theft, financial fraud, or targeted phishing attacks.The breach was formally disclosed to the Massachusetts Attorney General’s office, indicating regulatory scrutiny. While the exact cause (e.g., phishing, system vulnerability, or external cyberattack) was not specified, the exposure of employee data particularly Social Security numbers poses significant risks, including long-term identity fraud, credit manipulation, and reputational harm to the company. Affected individuals were offered free credit monitoring and identity protection services, underscoring the severity of the incident. Legal firms are investigating potential compensation claims for victims, suggesting liability concerns and operational disruptions for Travere Therapeutics.
Source: https://www.claimdepot.com/investigations/travere-therapeutics-data-breach-2025
TPRM report: https://www.rankiteo.com/company/travererare
"id": "tra5394253102725",
"linkid": "travererare",
"type": "Breach",
"date": "10/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'At least 50 individuals '
'(Massachusetts)',
'industry': 'Healthcare / Pharmaceuticals',
'location': 'San Diego, California, USA',
'name': 'Travere Therapeutics, Inc.',
'size': '400+ employees',
'type': 'Biopharmaceutical Company'}],
'customer_advisories': 'Individuals advised to monitor credit, place fraud '
'alerts, and report suspicious activity.',
'data_breach': {'data_exfiltration': 'Likely (data exposed implies potential '
'exfiltration)',
'number_of_records_exposed': 'At least 50 (Massachusetts)',
'personally_identifiable_information': ['Name',
'Date of birth',
'Address',
'Social Security '
'number',
'Phone number',
'Email address'],
'sensitivity_of_data': 'High (includes SSNs, dates of birth, '
'addresses)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Sensitive Personal Data']},
'date_publicly_disclosed': '2025-10-24',
'description': 'Travere Therapeutics, Inc., a biopharmaceutical company, '
'reported a cybersecurity incident in October 2025 that '
'exposed sensitive personally identifiable information (PII) '
'of at least 50 individuals in Massachusetts, including '
'current and former personnel. The breach was disclosed to the '
'Massachusetts Attorney General’s office on October 24, 2025. '
'Affected individuals may be eligible for compensation and are '
'advised to enroll in free credit monitoring and identity '
'protection services.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'exposure of sensitive PII',
'data_compromised': ['Name',
'Date of birth',
'Address',
'Social Security number',
'Phone number',
'Email address'],
'identity_theft_risk': 'High (due to exposure of SSNs and other '
'PII)',
'legal_liabilities': 'Potential lawsuits and compensation claims '
'for affected individuals'},
'investigation_status': 'Under investigation by Shamis & Gentile P.A. '
'(class-action law firm)',
'recommendations': ['Enroll in free credit monitoring and identity protection '
'services offered by Travere Therapeutics.',
'Regularly review account statements and credit reports '
'for unusual activity.',
'Place a security freeze or fraud alert on credit files '
'(via Equifax, Experian, or TransUnion).',
'Report unauthorized activity to law enforcement and the '
'Federal Trade Commission (FTC).',
'Consider changing passwords and monitoring financial '
'accounts closely.',
'Affected individuals may seek legal counsel for '
'potential compensation claims.'],
'references': [{'source': 'Shamis & Gentile P.A. Investigation Notice'}],
'regulatory_compliance': {'legal_actions': 'Potential class-action lawsuits '
'(investigation by Shamis & '
'Gentile P.A.)',
'regulatory_notifications': 'Disclosed to '
'Massachusetts Attorney '
'General’s office'},
'response': {'communication_strategy': 'Public disclosure via notice to '
'Massachusetts Attorney General and '
'affected individuals',
'incident_response_plan_activated': 'Likely (disclosure to '
'authorities and credit '
'monitoring offered)',
'recovery_measures': 'Free credit monitoring and identity '
'protection services offered to affected '
'individuals'},
'stakeholder_advisories': 'Affected individuals notified via breach notice; '
'credit monitoring services offered.',
'title': 'Travere Therapeutics, Inc. Data Breach (October 2025)',
'type': 'Data Breach'}