This week ·
Ridgeway Pharmacy Ltd
How they got in, as reported. A supplier or vendor that was compromised first.
← All items this week- Date
- 22 Oct 2026
- Place
- United States
- Who
- Ridgeway Pharmacy Ltd · Healthcare / Medical Clinic
- The way in
- Vendor compromise
- Source
- HIPAA Journal
01 · What was reported
What was reported.
Ridgeway Pharmacy reported a data security incident that compromised the personal and health information of nearly 259,000 customers. The breach was traced to its website, which had been designed and developed by a third party.
The way in, as the source states it: a supplier or vendor that was compromised first.
02 · What we check for it
What we check for it.
The outside services your domain depends on.
03 · If this happens at your firm
If this happens at your firm.
- Confirm every change of bank details on a number you already hold, even inside a real email thread.
- Agree with your main suppliers how a change of bank details is confirmed and keep it in writing.
04 · Source
Source.
Source: HIPAA Journal ↗This page repeats what the source reported, with its date. It says nothing about any firm that is not named in it.