BreachCensus

Ridgeway Pharmacy Ltd

United States of America

Ridgeway Pharmacy Ltd is an organisation in New Hampshire. It appears on the Massachusetts Attorney General breach-notification register, the California Attorney General breach-notification register, the Texas Attorney General breach-notification register, the Vermont Attorney General breach-notification register, the New Hampshire Attorney General breach-notification register, the Delaware Attorney General data security breach database and the Iowa Attorney General security breach notification list with 2 confirmed incidents; the most recent notice was filed on September 29, 2026.

Data as of October 27, 2026.

Sources

Confirmed incident

US-NH

Disclosed
September 29, 2026
Records affected
258,920

Was I affected? →

Timeline

  1. August 21, 2026
    Press coverage Press

    press report (acknowledged): Ridgeway Pharmacy said that on August 21, 2026, it became aware that personal information had been exposed via its third-party designed and developed website.

    source
  2. September 29, 2026
    Reported to regulator Regulator

    NH AG breach notification: an unknown number of New Hampshire residents affected

    source
  3. Undated
    Press coverage Press

    press report (individuals_notified): As a precaution against data misuse, the affected individuals have been offered complimentary credit monitoring and identity theft protection services.

    source
What a New Hampshire notice means

Governed by RSA 359-C:20. Notification to the Attorney General is required.

Note: the count is New Hampshire residents.

New Hampshire breach-notification register ↗

Confirmed incident

Filed in CA, DE, IA, MA, TX and VT

The same incident was filed separately with 6 jurisdictions within a few days of each other (CA, DE, IA, MA, TX and VT) — shown here as one incident.

Occurred
June 7, 2026
Disclosed
September 21, 2026
Records affected
258,920

Was I affected? →

Timeline

  1. September 21, 2026
    Reported to regulator Regulator

    CA AG breach notification: an unknown number of California residents affected

    source
  2. September 21, 2026
    Reported to regulator Regulator

    VT AG breach notification: 215 Vermont residents affected

    source
  3. September 21, 2026
    Reported to regulator Regulator

    MA AG breach notification: 2,329 Massachusetts residents affected

    source
  4. September 21, 2026
    Reported to regulator Regulator

    DE AG breach notification: an unknown number of Delaware residents affected

    source
  5. September 21, 2026
    Reported to regulator Regulator

    IA AG breach notification: an unknown number of Iowa residents affected

    source
  6. September 21, 2026
    Reported to regulator Regulator

    DE AG breach notification: an unknown number of Delaware residents affected

    source
  7. September 21, 2026
    Reported to regulator Regulator

    DE AG breach notification: 661 Delaware residents affected

    source
  8. September 25, 2026
    Reported to regulator Regulator

    TX AG breach notification: 33,485 Texas residents affected

    source
What a California notice means

Governed by Cal. Civ. Code §1798.82. A copy of the notification must be sent to the Attorney General when a single breach requires notifying more than 500 California residents.

Note: no affected-count is published on this register.

California breach-notification register ↗

What a Delaware notice means

Governed by 6 Del. C. §12B-102. Notice to the Attorney General is required when a breach affects more than 500 Delaware residents.

Note: the count is Delaware residents only, not a total.

Delaware breach-notification register ↗

What a Iowa notice means

Governed by Iowa Code §715C.2. Notice to the Attorney General is required within five business days of notifying consumers, for a breach requiring notification to more than 500 Iowa residents.

Note: no affected-count is published on this register.

Iowa breach-notification register ↗

What a Massachusetts notice means

Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.

Note: the count is Massachusetts residents only, not a total.

Massachusetts breach-notification register ↗

What a Texas notice means

Governed by Tex. Bus. & Com. Code §521.053. Notice to the Attorney General is required when a breach affects at least 250 Texas residents.

Note: the count is Texas residents only, not a total; the register’s underlying data also carries a separate national-total field, not shown in its public table, which this site uses to fill an incident-level records-affected figure that is otherwise empty.

Texas breach-notification register ↗

What a Vermont notice means

Governed by 9 V.S.A. §2435. Notification to the Attorney General is required.

Note: the count is Vermont residents.

Vermont breach-notification register ↗

Related

Disclosed around the same time