Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Custom Rx Shoppe data breach. According to dark web monitoring sources, a hacker group calling itself thegentlemen claimed responsibility for a cyberattack on Custom Rx Shoppe in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, Custom Rx Shoppe has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Custom Rx Shoppe
Custom Rx Shoppe, formally The Custom Prescription Shoppe, LLC, is a family-owned independent pharmacy in Bellingham, Washington, founded in 2003 by pharmacist Kevin Faris. The pharmacy offers retail pharmacy services, long-term care pharmacy services for nursing homes and assisted-living facilities, compounding of custom medications, durable medical equipment, immunizations, medication synchronization, and Medicare/Medicaid enrollment assistance, with free delivery across Whatcom, Skagit, and Island Counties. The owner also operates Happier at Home Bellingham, a senior home-care agency. According to its BBB profile, the business may no longer be active at its original Bellingham location, though its website remains operational.
What Happened?
Custom Rx Shoppe was listed as a claimed victim on the dark-web leak site of the ransomware group known as The Gentlemen, as indexed by Ransomware.live on September 30th, 2026. This is an attacker-side allegation only. Custom Rx Shoppe has not publicly confirmed any ransomware attack or data breach, and no corroborating sources — such as a state attorney general filing, HHS breach portal entry, or organizational statement — were found. No specific data types, breach dates, or data volumes have been disclosed by any party.
The Gentlemen (also tracked by Microsoft as Storm-2697) is a Ransomware-as-a-Service operation that emerged in mid-2025. The group follows a dual-extortion model, claiming to steal data before encrypting systems and threatening to publish it unless a ransom is paid. According to Bitsight, the group recorded a 2,100% increase in activity compared to its baseline as of August 2026, and a compromised command-and-control server revealed more than 1,570 linked victims across more than 17 countries. The group uses a Go-based locker targeting Windows, Linux, and ESXi environments and is known to target healthcare organizations, among other industries. In September 2026, The Gentlemen separately claimed an attack on healthcare company Veradigm, illustrating the group’s active focus on the healthcare sector. All statements about The Gentlemen’s activities and claims regarding Custom Rx Shoppe should be understood as attacker-side allegations that have not been independently verified or confirmed by Custom Rx Shoppe.
Key Facts at a Glance
- Company or Organization: Custom Rx Shoppe (The Custom Prescription Shoppe, LLC)
- Industry: Healthcare – Independent/Compounding Pharmacy
- Location: Bellingham, WA
- Incident type: Ransomware leak-site allegation (dark-web claim only; unconfirmed)
- Source: Ransomware.live – Victim: Custom Rx Shoppe, Bitsight – The Gentlemen Ransomware Group: Threat Actor Profile, Ransomware.live – Group: thegentlemen
What Should You Do?
Even though this incident has not been confirmed by Custom Rx Shoppe, it is a good idea to take protective steps now. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Monitor your existing financial accounts and review your credit reports for unfamiliar activity. You can access free credit reports at AnnualCreditReport.com. If you believe your information has been misused, visit IdentityTheft.gov for step-by-step recovery guidance from the Federal Trade Commission.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
