Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible PANTHERx Rare data breach. According to dark web monitoring sources, a hacker group calling itself Storm claimed responsibility for a cyberattack on PANTHERx Rare in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, PANTHERx Rare has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About PANTHERx Rare
PANTHERx Rare is a national specialty pharmacy focused exclusively on rare disease care, founded in 2011 and headquartered in Pittsburgh, PA. It is the largest independent rare pharmacy in the United States, licensed in all 50 states, with an additional facility in Collierville, TN. The company serves patients with rare and complex conditions through its proprietary RxARECARE patient engagement model and SWFT technology platform, working closely with prescribers and drug manufacturers. PANTHERx Rare was the first national pharmacy to earn dual rare disease accreditations from ACHC and URAC, and has won the MMIT Patient Choice Award nine times. The company was acquired by a consortium of private equity investors — Vistria Group, General Atlantic, and Nautic Partners — in a combined transaction valued at $2.8 billion.
What Happened?
PANTHERx Rare was listed as a victim in a ransomware leak-site allegation reported by Ransomware.live on September 15th, 2026. The claim is attributed to the Storm ransomware group, which alleged an attack with an estimated date of September 14th, 2026. These are attacker-side claims only and have not been confirmed by PANTHERx Rare or any regulatory body, including the HHS Office for Civil Rights breach portal or any state attorney general. No independent corroborating source was found.
Storm is an active ransomware group that has been operating since at least August 2026, claiming victims across healthcare, manufacturing, automotive, and agriculture sectors in the United States, Canada, and Australia. The group follows a double-extortion model, threatening to release stolen data unless the target initiates negotiations. No data types, data volume, or breach scope have been confirmed by any party other than the attacker, and the specific information allegedly involved in this incident has not been identified.
Key Facts at a Glance
- Company or Organization: PANTHERx Rare
- Industry: Healthcare – Specialty Pharmacy (Rare Disease)
- Location: Pittsburgh, PA (headquarters); Collierville, TN (additional facility)
- Incident type: Ransomware claim (attacker-side allegation, unconfirmed)
- Prior breach: No prior data breaches involving PANTHERx Rare were found in public sources
- Source: Ransomware.live – PANTHERx Rare Victim Page; DeXpose – Storm Ransomware Strikes Technology Dynamics; PANTHERx Rare – About Us
What Should You Do?
Even when a breach has not been confirmed, it is a good idea to take precautions if you are a PANTHERx Rare patient or have otherwise shared personal information with the company. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and regularly monitoring your financial accounts and credit reports for unfamiliar activity. You can request free copies of your credit reports at AnnualCreditReport.com. Because PANTHERx Rare is a specialty pharmacy serving patients with rare diseases, any confirmed breach could involve sensitive health and prescription information; if you notice unexpected charges on insurance statements or unfamiliar entries in your medical records, report them promptly. For guidance on responding to identity theft, visit IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
