Notice of Data Security Incident

Carmichael’s Cashway Pharmacy, Inc. (“Carmichael’s”) is notifying individuals whose personal information may have been involved in a recent network security incident experienced by one of its third-party vendors, Nationwide Recovery Services (“NRS”). NRS provided collection services for general billing. Please note, Carmichael’s network systems were not compromised.

On or about March 10, 2025, Carmichael’s was notified that NRS experienced a data breach on or around July 11, 2024. NRS discovered that an unauthorized third party attempted to infiltrate its computer network. Upon detecting the incident, NRS took steps to secure its environment and launched an investigation to determine the scope and extent of any potential unauthorized access to its systems. NRS’ forensic investigation determined that certain data pertaining to Carmichael’s was exposed in the incident. Notably, Carmichael’s network environment was not impacted.

As a result of the incident, Carmichael’s determined the following information may have been exposed to an unauthorized third party: name, date of birth, Social Security number, and protected health information (patient number and balance amount) may have been impacted by an unauthorized actor during this incident.

As of this writing, Carmichael’s has not received any reports of related identity theft since the date of the incident ( July 11, 2024, to present).

Carmichael’s is mailing letters to potentially impacted individuals with details about the incident and, out of an abundance of caution, providing resources they can use to help protect their information. Carmichael’s is also offering potentially involved individuals access to free credit monitoring and identity theft protection services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation services.

The notification letter to the potentially impacted individuals includes steps they can take to protect their information. In order to address any concerns and mitigate any exposure or risk of harm following this incident, Carmichael’s has arranged for complimentary credit monitoring services and identity theft protection services to all potentially impacted individuals at no cost to them. Carmichael’s recommends individuals enroll in the services provided and follow the recommendations contained within the notification letter to ensure their information is protected.

Individuals should refer to the notice they receive in the mail regarding steps they can take to protect themselves. As a precautionary measure, potentially impacted individuals should remain vigilant to protect against fraud and/or identity theft by, among other things, reviewing their financial account statements and monitoring free credit reports. If individuals detect any suspicious activity on an account, they should promptly notify the institution or company with which the account is maintained. Individuals should also promptly report any fraudulent activity or any suspected identity theft to proper law enforcement authorities, including the police and their state’s attorney general. Individuals may also wish to review the tips provided by the Federal Trade Commission (“FTC”) on fraud alerts, free security/credit freezes and steps that they can take to avoid identity theft. For more information and to contact the FTC, please visit www.identitytheft.gov or call 1-877-ID-THEFT (1-877-438-4338). Individuals may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.

Individuals may obtain a free security freeze by contacting any one or more of the following national consumer reporting agencies:

Equifax Security Freeze
P.O. Box 105788
Atlanta, GA 30348
1-888-298-0045
https://www.equifax.com/personal/credit-
report-services/credit-freeze/

Experian Security Freeze
P.O. Box 9554
Allen, TX 75013
1-888-397-3742
www.experian.com/freeze/center.html

TransUnion Security Freeze
P.O. Box 160
Woodlyn, PA 19094
1-800-916-8800
www.transunion.com/credit-freeze

 

For individuals seeking more information or questions about this incident or requesting assistance in enrolling in credit monitoring, please call 1-833-844-2730 between 8:00 a.m. to  8:00 p.m. Eastern Time, Monday through Friday, excluding holidays. In addition, individuals may visit Carmichael’s website for more information at www.carmichaelsmed.com.