Pharmaca was a victim of data security incident which involves payment information of some customers. Importantly, this incident did not include medical records, prescription information, Social Security numbers, driver’s license numbers, passport numbers, government identification numbers, or other sensitive information about Pharmaca’s customers. Payment card information, such as credit or debit card number, expiration date and other card data, have been acquired. Names may also have captured for customer making swipe transactions. The incident did not impact online purchases only purchases in their brick-and-mortar stores and the breach did not compromise any protected health information.

The California Office of the Attorney General reported a data breach incident involving Pharmaca Integrative Pharmacy Inc. on January 18, 2019. The breach occurred between July 19, 2018, and December 12, 2018, potentially affecting payment card information of customers who made purchases at certain retail locations. The specific number of individuals affected is unknown.