PANTHERx Rare Data Breach Lawsuit: Ransomware Claim, Five Suits in Pittsburgh
Active Litigation
PANTHERx Rare is a Pittsburgh specialty pharmacy that ships rare-disease medicines nationwide. On September 15, 2026, a ransomware group called Storm claimed it had broken into the pharmacy's systems and threatened to leak the data. Within weeks, class actions were filed in federal court in Pittsburgh. As of October 18, 2026, the company has not publicly confirmed a breach. No count of affected people has been published, and there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened and What the Lawsuits Say
Everything public about the PANTHERx Rare data breach starts with the attacker. On September 15, 2026, Storm listed PANTHERx Rare on its leak site and posted an extortion notice: “The full leak will be published soon, unless a company representative contacts us.” Leak-site trackers date the intrusion to September 14, 2026. That is the attacker's claim, not a confirmed finding.
The first detailed complaint, filed September 21, 2026, alleges that Storm took “an unknown quantity of highly sensitive patient and employee data.” It also says PANTHERx “has not publicly confirmed the Data Breach and has not yet provided direct, individual notice.” The complaint says the pharmacy holds names, addresses, dates of birth, email addresses, Social Security numbers, ID numbers, insurer details and medical treatment information. It pleads negligence, negligence per se, breach of implied contract, breach of fiduciary duty and unjust enrichment, and it asks for declaratory relief. These are allegations. No court has found that any data was taken.
Case details
Every case found so far is in the U.S. District Court for the Western District of Pennsylvania, against PANTHERx Specialty, LLC, the company that trades as PANTHERx Rare Pharmacy:
— Barron v. PANTHERx Specialty, LLC, No. 2:26-cv-02070, filed September 17, 2026
— Hoag v. PANTHERx Specialty, LLC, No. 2:26-cv-02083, filed September 21, 2026, before Judge W. Scott Hardy
— Doe v. PANTHERx Specialty, LLC, No. 2:26-cv-02094, filed September 22, 2026, also before Judge Hardy
— Greer v. PANTHERx Specialty, LLC, No. 2:26-cv-02119, filed September 25, 2026
— Goldberg v. PANTHERx Specialty, LLC, No. 2:26-cv-02159, filed October 1, 2026
A sixth case, Santilli v. PANTHERx Specialty, LLC, No. 2:26-cv-01881, was filed September 9, 2026, before Storm's claim appeared. Its complaint is not publicly available, so we could not confirm what it is about.
Status: Early Pleadings, No Settlement
We also found no breach notice from PANTHERx on its website and no published count of affected people. If PANTHERx reports the incident to federal health regulators or to state attorneys general, that filing will be the first official figure.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Am I Affected?
The Hoag complaint proposes a class of “all persons whose Private Information was compromised” in the breach PANTHERx allegedly suffered around September 14, 2026. It says that includes both patients and employees. PANTHERx is licensed in all 50 states, so patients could be anywhere in the country. If you are a current or former patient, a family member who handled a prescription, or a staff member, your data may have been stored there.
The practical test is a letter. When a covered pharmacy confirms that health data was taken, it has to notify the people involved. As of October 18, 2026, no such letters have been reported. If one arrives, keep it and the envelope: it lists which of your fields were involved, and it is your proof of class membership. You do not need to sign up anywhere to be in a class.
Is There Any Money?
For context, and not as a prediction: settled healthcare breaches involving Social Security numbers have usually paid back documented losses, paid a small flat amount to people without receipts, and offered credit monitoring. Our data breach settlement calculator shows how those payments are typically built.
PANTHERx Rare Breach Timeline
September 14, 2026 — Attack Date Claimed
Leak-site trackers date Storm's intrusion into PANTHERx Rare's systems to this day. That date comes from the attacker's listing.
September 15, 2026 — Storm Goes Public
Storm lists PANTHERx Rare on its leak site and threatens to publish the data unless the company makes contact.
September 17–22, 2026 — First Suits in Pittsburgh
Barron, Hoag and Doe are filed in the Western District of Pennsylvania. On September 23, 2026, Judge W. Scott Hardy provisionally lets the Doe plaintiff proceed under a pseudonym.
September 25 – October 1, 2026 — More Cases
Greer (2:26-cv-02119) and Goldberg (2:26-cv-02159) are filed in the same court.
October 5–6, 2026 — Motions to Consolidate
Plaintiffs in five of the cases ask the court to combine them, and some ask it to appoint lead counsel.
October 18, 2026 — No Confirmation, No Settlement
There is still no public breach notice, no published count of affected people, no settlement and no claim form.
Three Things to Watch For
A breach that is claimed but not confirmed, with patients who rely on a single pharmacy for critical medicines, gives scammers easy openings:
Calls that say they are your PANTHERx care team
PANTHERx patients get regular calls about refills and insurance, so a fake caller fits right in. If anyone asks you to “re-verify” your Social Security number or card details, hang up. Call back on the number printed on your prescription paperwork.
Messages claiming to hold your records
Storm used a public extortion threat. Some ransomware crews also contact patients directly or impersonate the attackers. Do not pay or reply to anyone who says they have your medical file. Report it to the FBI's IC3 instead.
“Claim your PANTHERx settlement” pages
There is no settlement, so there is no claims portal. Ads urging you to “register for the PANTHERx lawsuit” are signing you up with a law firm. That is a real choice, not a required form.
PANTHERx Rare Data Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Was PANTHERx Rare actually hacked?
It has not been confirmed. The ransomware group Storm claimed the attack on September 15, 2026. As of October 18, 2026, PANTHERx has not publicly confirmed a breach, and its website shows no incident notice. The lawsuits rely on the attacker's claim and on threat-intelligence reports.
Is there a PANTHERx Rare data breach lawsuit?
Yes. At least five class actions over the claimed breach are pending in the Western District of Pennsylvania. The first was Barron (No. 2:26-cv-02070), filed September 17, 2026, and the most detailed public complaint is Hoag (No. 2:26-cv-02083). Judge W. Scott Hardy has the Hoag and Doe cases. Consolidation has been requested.
How many people were affected?
Unknown. As of October 18, 2026, there was no published count from the company and no filing with a regulator that we could find. The Hoag complaint describes “an unknown quantity” of patient and employee data.
How much compensation will I get for a data breach?
In this case, nothing yet. There is no settlement, no fund and no claim form. In settled healthcare breaches, payments generally depend on documented losses, with smaller flat amounts for everyone else. Our calculator shows typical structures, but it is not a forecast for PANTHERx.
Are data breach letters legit?
Often they are, but none had been reported for PANTHERx as of October 18, 2026. A real notice explains what happened and which of your data fields were involved. It does not ask you to pay anything or send your full Social Security number. If you are not sure, call PANTHERx on the number from your own records, not the number in the letter.
Is this related to the Panera or CVS data breach cases?
No. Those cases involve different companies and different incidents, and this page does not cover them. See our pages on the Panera Bread lawsuit and the CVS lawsuit.
Do I have to do anything to join?
No. No class has been certified and there is nothing to file. If a class is certified or a settlement is reached, a court-appointed administrator will send notice to class members.
What should PANTHERx patients do right now?
Freeze your credit at all three bureaus. It is free and you can undo it. Read your insurer's explanation-of-benefits statements for prescriptions or care you never received. Be suspicious of calls about your medication that ask for identity details. Keep any notice letter you receive.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Guardian Pharmacy Data BreachAnother 2026 pharmacy breach and where its lawsuits stand
- Class Action Payout CalculatorHow fund size and claim rates shape individual payments