WIRX Pharmacy Data Breach

On or about December 7, 2025, WIRX Pharmacy (“WIRX”) became aware of suspicious activity affecting its computer environment. WIRX immediately began an investigation to determine the nature and scope of the event. The investigation concluded that between December 6, 2025 and December 7, 2025, data from certain systems was accessed or acquired without authorization.

After reviewing the data stored in the affected systems, WIRX determined on January 23, 2026 that the compromised files contained personal information belonging to certain individuals. The affected personal information includes name and Social Security number.

On February 5, 2026, WIRX posted public notice on its website and submitted notice to the U.S. Department of Health and Human Services (HHS) and relevant media pursuant to its obligations under HIPAA. Written notice was also provided to state and federal regulators.

WIRS is a specialized pharmacy focused on providing medications for workers’ compensation and auto injury claims. They offer rapid, often 24-48 hour, delivery, with specialized services for patients, physicians, and attorneys, ensuring no out-of-pocket costs for injured workers, even for pending or denied claims.

WIRX states that it takes the confidentiality and security of personal and protected health information seriously. Following the event, WIRX notified federal law enforcement, reviewed internal security practices, and implemented measures to reduce the likelihood of future incidents. As part of its response, WIRX is offering 12 months of complimentary credit monitoring and identity restoration services at no cost to impacted individuals.

If you received a Data Breach notification letter from WIRX Pharmacy, it confirms that your personal information may have been accessed and/or acquired by an unauthorized actor.

What information is involved in the WIRX Pharmacy Data Breach?

Compromised information may include:

While WIRX states it has no evidence that the compromised information has been misused, exposure of Social Security numbers and health‑related information is considered highly sensitive and may lead to ongoing risk.

Your Personally Identifiable Information (PII) includes details that can be used to identify you, while prescription information may relate to sensitive health‑related data tied to your contact lens order. Organizations that maintain this information must take appropriate steps to safeguard it under state and federal data‑privacy requirements.

If Protected Health Information (PHI) was involved, the exposed data may include medical information protected under HIPAA and state privacy laws. PHI exposure increases the risk of medical fraud, insurance fraud, and unauthorized use of confidential health data.

Residents of California benefit from enhanced privacy protections under the California Consumer Privacy Act (CCPA), which provides additional rights regarding the collection, storage, and protection of personal information. California residents may also have additional legal remedies when personal data is compromised in a breach.

If your data was included in the breach, it is important to remain vigilant in monitoring order histories, provider statements, and any communications regarding your vision‑care services.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.