Guardian Pharmacy Data Breach: A Ransomware Claim, Not Yet a Lawsuit
Reference Guide
On October 1, 2026 a ransomware group posted “Guardian Pharmacy LLC” on its leak site. Guardian Pharmacy Services, the Atlanta-based pharmacy for assisted living and group homes, has not confirmed a breach. As of October 17, 2026 there is no notice letter, no regulator filing, no lawsuit on file and no settlement — only law-firm investigations.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Reported
Guardian Pharmacy Services, Inc. (NYSE: GRDN) is the principal pharmacy for residents of long-term care facilities — mostly assisted living, behavioral health facilities and group homes. As of June 30, 2026 its 61 pharmacies served approximately 210,000 residents in about 8,400 facilities across 39 states, per its quarterly SEC report. That is the population whose records would be at stake.
On October 1, 2026, a ransomware leak-site tracker recorded a new listing for “Guardian Pharmacy LLC” (domain guardianpharmacy.com). The post itself says only “Hacked; more news coming soon.” The group claims it has data and threatens to leak it — that is the attackers’ assertion, not a confirmed fact. No files, record counts or data types have been described publicly.
Law firms began advertising “investigations” on October 1 and October 2, 2026. Those are intake pages, not court filings, and they do not establish that anyone’s information was taken.
Case details
No lawsuit has been filed that we can find. As of October 17, 2026, a search of our federal docket database (all district-court filing feeds since October 10, 2026, plus the full index through September 30, 2026) returns no case naming Guardian Pharmacy, Guardian Pharmacy Services or Guardian Pharmacy LLC. Web searches turned up no complaint either. There is therefore no court, no case number and no judge to report.
The company’s own filings say nothing about an incident yet. Guardian’s most recent 8-K, dated September 10, 2026, concerns stock lock-up agreements. Its annual report, filed March 11, 2026, said it was not aware of any cybersecurity incident that had materially affected the company. That statement predates the October listing.
Status: Unconfirmed Breach, No Lawsuit, No Settlement
One open question matters: the leak post names “Guardian Pharmacy LLC,” and the post does not name a parent company. Law-firm pages tie the listing to Guardian Pharmacy Services, but the company has not said so. If a breach is confirmed, the notice letters will settle which entity and which records are involved.
Who Could Be Affected
If the claim proves true, the people with the most at stake are residents of assisted living communities, behavioral health facilities and group homes served by Guardian, along with their families or guardians who handle paperwork, and the company’s staff. Pharmacy records for these residents typically sit alongside insurance and prescriber details.
The practical test is your mail. Under HIPAA, a covered entity must notify affected people without unreasonable delay and no later than 60 calendar days after it discovers a breach. Breaches involving 500 or more people also go to the U.S. Department of Health and Human Services at the same time. A letter from Guardian — or from your loved one’s facility naming Guardian — is the evidence that you are affected. Keep it and the envelope.
Nobody joins a class action by signing up on a website. If a case is filed and later settles, a court-appointed administrator notifies class members.
What a Case Like This Could Pay
For context only: when healthcare-breach class actions do settle, they usually combine reimbursement of documented losses, a smaller flat payment for people who document nothing, and credit or medical-identity monitoring. Amounts depend on the data involved and the size of the class, which are unknown here. Our data breach settlement calculator shows how those pieces typically add up, and the Albany College of Pharmacy settlement is an example of a pharmacy-sector case that did reach the claims stage.
Guardian Pharmacy Breach Timeline
March 11, 2026 — Annual Report
Guardian files its 10-K, stating it is not aware of any cybersecurity incident that has materially affected the company.
June 30, 2026 — Scale of the Business
Guardian reports 61 pharmacies serving about 210,000 residents in roughly 8,400 long-term care facilities across 39 states.
October 1, 2026 — Leak-Site Listing
A ransomware group posts “Guardian Pharmacy LLC” with the line “Hacked; more news coming soon.” No data or scope is described.
October 1–2, 2026 — Law-Firm Investigations
At least two plaintiffs’ firms publish intake pages. These are investigations, not lawsuits.
October 17, 2026 — Still Unconfirmed
No company statement, no 8-K after September 10, 2026, no notice in the California breach list, and no case in federal dockets.
Next — Notice Letters, If Any
If Guardian confirms a breach of health information, HIPAA requires individual notice within 60 calendar days of discovery. Lawsuits usually follow notice letters.
Three Things to Watch For
An unconfirmed ransomware claim against a pharmacy for elderly and disabled residents is an easy hook for fraud:
“Claim your Guardian Pharmacy settlement” pages
There is no settlement and no claims site. A form asking for a resident’s Social Security number, Medicare number or date of birth to “register” is collecting data, not filing a claim.
Calls that name a medication or a facility
Families of assisted living residents are the likely targets. A caller who knows a facility name or a prescription is not proof of legitimacy — Guardian, the facility or a court administrator will not phone to demand payment or a Medicare number to “protect” a refill.
“Your records were leaked — pay to remove them”
Ransomware groups and copycats sometimes contact individuals directly. Do not pay, click links or reply. Report it to the FBI’s IC3 and keep the message.
Guardian Pharmacy Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Did Guardian Pharmacy have a data breach?
It is unconfirmed. On October 1, 2026 a ransomware group listed “Guardian Pharmacy LLC” on its leak site. As of October 17, 2026 Guardian Pharmacy Services has not confirmed an incident, and we found no notice letters or regulator filings.
Is there a Guardian Pharmacy data breach lawsuit?
Not as of October 17, 2026. We found no complaint in federal dockets or news coverage — only law-firm pages saying they are investigating. If a suit is filed, this page will list the court, case number and date.
What information was taken?
Nobody has said. The leak post describes no files, and the company has published nothing. Long-term care pharmacy records generally include names, dates of birth, insurance details and medication lists, but whether any of that was involved here is unknown.
How many people were affected?
No number has been reported. For scale only: as of June 30, 2026 Guardian served about 210,000 residents in roughly 8,400 facilities across 39 states. That is not a count of affected people.
How will I know if my family member’s records were involved?
By letter. HIPAA requires notice without unreasonable delay and no later than 60 calendar days after a breach is discovered, and breaches of 500 or more people must be reported to HHS. Notices may name Guardian or the resident’s facility.
How much can I get for a data breach lawsuit?
Here, nothing yet — there is no lawsuit and no settlement. In settled healthcare breaches, payouts usually mix documented-loss reimbursement, a small flat payment and monitoring. Our data breach settlement calculator explains the typical structure.
Is there a class action lawsuit related to the Change Healthcare breach?
That is a different company and a different incident; this page does not cover it. See our Change Healthcare data breach page for that litigation.
What should I do right now?
Freeze credit at all three bureaus for yourself or the resident you care for — it is free and reversible. Check Medicare or insurer statements for prescriptions or services nobody received. Keep any letter from Guardian or the facility.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay once one exists
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Settlement Payout CalculatorHow funds are split after fees and claim rates
- Change Healthcare Data BreachA separate healthcare breach with its own litigation