Morton LTC 2025 Data Breach (40.1 Thousand People Affected)

The 2025 Morton Drug Company (Morton LTC) data breach involved unauthorized network access affecting the organization's information-technology systems. The U.S. Department of Health and Human Services Office for Civil Rights reported that 40,051 people were affected.

Morton LTC is a family-owned Wisconsin healthcare organization that provides pharmacy and medication services to long-term-care facilities.

How Was the Incident Discovered?

Morton Drug Company detected a network-security incident affecting its systems around August 20, 2025. The organization engaged outside cybersecurity specialists to contain and investigate the event and notified law enforcement.

What Information Was Affected?

A review completed around October 21, 2025, found that names, addresses, and prescription information belonging to certain patients were involved. Social Security numbers were also present for some individuals.

What Measures Did the Organization Take?

Morton LTC says it notified affected people, provided protective resources, and strengthened information-security measures intended to reduce the likelihood of a similar event.

What Should Affected People Do?

Notice recipients should review insurance explanations of benefits, prescription records, and account activity for transactions they do not recognize. The organization said its investigation had not identified fraud or identity theft related to the event, but suspicious entries should be verified with the pharmacy or insurer.