Morton Drug Company Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (December 4, 2025) – Federman & Sherwood, a national law firm experienced in data breach, privacy, and healthcare regulatory matters, is investigating a significant cybersecurity incident involving Morton Drug Company, following the organization’s recent submission to the U.S. Department of Health and Human Services Office for Civil Rights (HHS-OCR).
According to the HHS breach portal, Morton Drug Company—a healthcare provider based in Wisconsin—reported that 40,051 individuals were affected by a Hacking/IT Incident involving a network server. The breach was submitted to HHS on November 10, 2025.
Because the breached system was a network server, the incident may have involved some of the most sensitive categories of protected health information (PHI) maintained by the provider. Although the HHS filing does not specify the exact data elements exposed, incidents of this nature commonly involve information such as patient names, addresses, dates of birth, treatment details, medical record numbers, health insurance information, and potentially Social Security numbers or financial information.
Morton Drug Company has not yet publicly disclosed the cause of the intrusion, the duration of unauthorized access, or whether the threat actor exfiltrated data. As a healthcare provider subject to HIPAA, Morton Drug Company is legally required to conduct a thorough investigation, mitigate potential harm, notify affected individuals, and implement corrective safeguards to prevent recurrence.
Federman & Sherwood is investigating the incident to determine whether Morton Drug Company maintained appropriate administrative, physical, and technical safeguards required under HIPAA, whether the breach could have been prevented, and what legal rights may be available to affected patients.
The compromised information may have included:
- Full name
- Social Security number
- Date of birth
- Medical information
- Health insurance information
- Financial information
- Other sensitive information
What is Morton Drug Company?
Morton Drug Company, now known as Morton LTC, is a family-owned pharmacy that specializes in providing long-term care pharmacy solutions.
If you were impacted by this breach, you may contact Federman & Sherwood at 1-800-237-1277 or click the link to complete the Data Breach Questionnaire and someone will reach out to you shortly.