Pharmaceutical industry data breaches expose patient data from clinical trials, employee records, and sometimes health information tied to drug safety monitoring, patient assistance programs, or treatment programs run directly by pharmaceutical companies. These exposures can lead to medical identity theft, serious privacy violations involving sensitive health conditions or clinical trial participation, and financial fraud affecting both patients and employees of the breached company. Clinical trial data is especially sensitive because it can reveal a person’s participation in research related to a specific medical condition, sometimes before that diagnosis is otherwise public or even fully confirmed. Pharmaceutical companies also handle substantial amounts of employee and business partner data across research, manufacturing, and distribution operations, any of which could be affected by a breach. This page tracks confirmed data breaches at pharmaceutical companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their medical and financial privacy.
Perrigo Company notified the Vermont Attorney General of a data breach that exposed consumers’ Social Security numbers, raising serious identity theft risks for affected individuals.
Perrigo Company Data Breach Exposes Social Security Numbers Read More »
Fresenius Kabi USA, LLC notified the Vermont Attorney General of a data breach that exposed Social Security numbers, putting affected individuals at risk of identity theft.
Fresenius Kabi USA Data Breach Exposes Social Security Numbers Read More »
Amgen Inc. disclosed that hackers exfiltrated data from its cloud environments, including patient protected health information, in a cybersecurity incident the company has deemed material.
Amgen Data Breach Exposes Patient Health Information and Proprietary Data Read More »
A ransomware group calling itself Chaos claims to have stolen 142 GB of corporate data from Aphena Pharma Solutions, including sensitive financial records.
Aphena Pharma Solutions Data Breach Exposes Financial and Corporate Records Read More »
Takeda Pharmaceuticals USA disclosed a data breach after an unauthorized third party accessed employee credentials and exposed sensitive personal and medical information belonging to affected individuals in Texas, Massachusetts and New Hampshire.
Takeda Pharmaceuticals Data Breach Exposes Social Security Numbers and Medical Records Read More »
Novo Nordisk disclosed unauthorized access to internal systems that exposed pseudonymized clinical trial data and identifying details of healthcare professionals, raising phishing and impersonation risks.
Novo Nordisk Data Breach Exposes Patient and Healthcare Professional Data Read More »
West Pharmaceutical Services discovered a cyberattack on May 4, 2026, after detecting suspicious activity across its network, prompting the company to shut down affected systems, notify law enforcement, and hire forensic specialists including Unit 42. The breach disrupted global operations, and investigators have not confirmed whether employee, patient, or customer personal data was exposed. Affected
West Pharmaceutical Services Data Breach Investigation Read More »