Lewis Drug Hit by AliLock Ransomware Attack, Exposing Sensitive Customer Data On March 3, a ransomware group called AliLock claimed to have breached the IT network of Lewis Drug, a regional pharmacy chain operating in South Dakota, Iowa, and Minnesota. The attack resulted in the theft of 110 gigabytes of data, including customer names, Social Security numbers, dates of birth, contact details, and confidential medical records. Multiple lawsuits have since been filed against Lewis Drug, with plaintiffs seeking class action status on behalf of affected customers. The breach has drawn attention amid the 2026 Sioux Falls mayoral race, as a lawmaker involved in crafting new revenue policies for local governments faces scrutiny over broader cybersecurity concerns in the region. The incident underscores the growing threat of ransomware attacks targeting healthcare and retail sectors, where sensitive personal data remains a prime target for cybercriminals.