Data Breach / Consumer Privacy
Morton Drug
Company Data Breach Investigation
Nov 27, 2025
Bibiyan Law Group is investigating a potential class action lawsuit against Morton Drug Company for a recent data breach.
Bibiyan Law Group is investigating a potential class action lawsuit against Morton Drug Company
for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Morton Drug Company, complete the
form above so we can discuss your legal options.
Bibiyan Law Group is investigating a potential class action lawsuit against Morton Drug Company
for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Morton Drug Company, complete the
form above so we can discuss your legal options.
Nov 27, 2025
Morton Drug Company
Data Breach Investigation
Morton Drug Company, an independent pharmacy, has confirmed a significant cybersecurity incident that exposed sensitive personal and medical information. The breach was first discovered on August 20, 2025, and after a formal investigation concluded on or around October 21, 2025, the company announced on November 7, 2025, that 40,051 individuals were affected across the United States.
According to the company's notice, unauthorized actors gained access to portions of Morton's IT systems, resulting in the exposure of both personally identifiable information (PII) and protected health information (PHI). The compromised data varies by individual but may include names, addresses, prescription information, and, in some cases, Social Security numbers. While the exact method of intrusion has not been publicly disclosed, the scope of data exfiltrated points to a serious cybersecurity event with heightened risks of identity theft, medical fraud, and unauthorized use of personal information.
Morton Drug Company published its data security incident notice on November 7, 2025, and subsequently reported the breach to the U.S. Department of Health and Human Services (HHS) on November 10, 2025, as required under federal law.
About Morton Drug Company
Morton Drug Company, also known as Morton LTC, is a pharmacy located in Neenah, Wisconsin that specializes in long-term care pharmacy services. The company provides medication dispensing, packaging, delivery, and support for residents in nursing homes and assisted-living facilities. As part of these services, Morton handles protected health information (PHI) and personally identifiable information (PII) for thousands of individuals. This makes strong data privacy practices critical to ensuring residents' information remains safe.
Nov 27, 2025
What Happened
On August 20, 2025, Morton Drug Company (Morton LTC) discovered suspicious activity within its computer network. The company launched an investigation and determined that unauthorized individuals had gained access to certain systems containing sensitive personal and medical information. The review, completed on or around October 21, 2025, confirmed that data belonging to 40,051 individuals may have been exposed. Morton publicly announced the incident on November 7, 2025, and later reported it to federal regulators.
Next Steps
If you believe you may have been affected by the Morton Drug Company data breach, it is essential to take action. We at Bibiyan Law Group are here to assist you in understanding your rights and exploring your options. Please reach out to us to discuss your situation and receive guidance on how to protect your personal information and mitigate any potential risks.
Individuals whose information was exposed should begin by carefully reviewing any breach notification letter and keeping a copy for their records. It is important to monitor financial, medical, and insurance accounts for any unauthorized activity, as the compromised data may increase the risk of identity theft, fraud, or misuse of medical information. You may also consider placing a fraud alert or credit freeze with the major credit bureaus to prevent unauthorized use of your identity. Because this breach involves sensitive personal and health information, you may be eligible to participate in a legal claim or investigation seeking compensation for the risks and harm caused.
Common questions
Everything you need to know about the data breach investigation.
What information was compromised in the breach?
Data breaches can potentially expose sensitive personal information including names, Social Security numbers, dates of birth, medical information, health insurance details, and financial account information. The specific data compromised varies by case and is typically disclosed in breach notification letters.
How do I know if I'm affected?
If you received a notification letter from Morton Drug Company, your information was likely compromised in the breach. If you were a customer or patient but did not receive notification, you should still contact us to discuss your situation.
What compensation might I be entitled to?
Victims of data breaches may be entitled to compensation for identity theft monitoring services, out-of-pocket expenses, time spent addressing the breach, credit monitoring, and in some cases, statutory damages. Each case is unique and potential compensation depends on the specific circumstances.
How much does it cost to join the investigation?
There is no cost to join our investigation. We handle these cases on a contingency fee basis, meaning you pay nothing unless we recover compensation for you. Your initial consultation is completely free.
What should I do if I received a breach notification?
Save the notification letter and any related correspondence. Monitor your credit reports and financial accounts for suspicious activity. Consider placing a fraud alert or credit freeze. Then contact us to discuss your legal options and potential participation in the class action.
How long do I have to file a claim?
Statutes of limitations vary by state and claim type. It's important to act quickly to preserve your legal rights. Contact us as soon as possible after receiving your breach notification to ensure you don't miss any important deadlines.
Contact us for your free consultation
Babiyan Law Group
Dedicated to providing
exceptional legal representation
with integrity and excellence.
Quick Links
About Us
Services
FAQ
Contact
Legal Disclaimer & Privacy Policy
This page provides general information and does not constitute legal advice. No guarantee of results. Your submission does not create an attorney-client relationship. Legal services are provided only under a signed written agreement. This website is an Attorney Advertisement. David Bibiyan of Bibiyan Law Group, P.C., licensed to practice law in California, is responsible for this advertisement. Bibiyan Law Group, P.C. is a California law firm. This webpage is paid for by Bibiyan Law Group, P.C., in California. Persons accessing this web page agree that they are accessing the website in California. No advertising is intended in jurisdictions where this web page fails to comply with local law and regulation. Bibiyan Law Group, P.C. occasionally shares responsibility with other lawyers when prosecuting a case, with the clients’ informed written consent. This advertisement is not a guarantee, warranty, or prediction regarding the outcome of any legal matter. Every case is different and results depend on the law and facts of each case. Bibiyan Law Group, P.C.performs legal services within California and elsewhere as authorized by law.Legal services not available in all jurisdictions. The information provided on this website is for general informational purposes only and is not legal advice. No legal advice is provided by or through this website. No attorney-client relationship is created by viewing this website or by sending an inquiry to Bibiyan Law Group, P.C. Bibiyan Law Group, P.C. accepts clients and provides legal advice to clients only under the terms of a written agreement signed by the client and the attorney. Where Bibiyan Law Group, P.C.provides legal services to a client on a contingency fee basis, the client will not be held responsible for any costs advanced by the law firm(s) where no recovery is obtained. We are dedicated to protecting the privacy of our website visitors. Regarding data collection and use, we may collect, store, and utilize various types of personal information, which include details about your geographical location, browser type and version, and operating system. It also encompasses information regarding your visits to and use of this website, such as the referral source, length of visit, page views, and navigation paths, in addition to information you provide us including your name and email address, and any other personal information you opt to send to us. We intend to use the personal information submitted through our website for specified purposes in this policy or on relevant website pages. Our use of your personal information may include handling inquiries made by or about you in relation to our website.This policy may be amended from time to time by publishing a new version on our website. We encourage you to occasionally check this page to ensure you are satisfied with any changes to this policy. Regarding your rights, you may instruct us to provide you with any personal information we hold about you; the provision of such information will be subject to a fee (if legally permissible)and the supply of appropriate evidence of your identity. Attorney Advertisement
Disclaimer: This website may be construed as legal advertising. The information on this website is for general information purposes only. Nothing on this site should be taken as legal advice for any individual case or situation. This information is not intended to create, and receipt or viewing does not constitute, an attorney-client relationship.Results in legal matters depend upon a variety of factors unique to each case. The Bibiyan Law Group P.C. does not guarantee, create a warranty or make a prediction of a particular result in future matters.
Also Operating As: Please note that the Bibiyan Law Group P.C. also conducts business as Tomorrow Law and La Casa de Inmigración to better serve diverse communities with specialized legal services.