Strauss Borrelli PLLC, a leading data breach law firm, is investigating College Hometown Pharmacy and its parent company Albany College of Pharmacy and Health Sciences (“College Hometown Pharmacy”) regarding its recent data breach. The College Hometown Pharmacy data breach may have involved sensitive personal information and protected health information belonging to over 9,700 individuals.
ABOUT COLEGE HOMETOWN PHARMACY:
College Hometown Pharmacy is a not-for-profit community located in the Hometown Health Centers clinic in Schenectady, New York.2 Opened in 2016 by the Albany College of Pharmacy and Health Sciences, College Hometown Pharmacy provides an experience for students and improves access to pharmacy and health care services for its community.2 A sister organization, College Parkside Pharmacy, was opened a year later with the same goals.2 On July 28, 2025, College Parkside Pharmacy’s ownership was transferred to Whitney Young Health, a network of community health programs in the Capital Region.3
WHAT HAPPENED?
Recently, College Hometown Pharmacy and Albany College of Pharmacy and Health Sciences (ACHPS) experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on or about September 14, 2024, ACHPS detected unusual activity in its network as a result of a cybersecurity incident.1 Consequently, ACHPS launched an investigation to determine the nature of the incident.
Through its investigation, ACHPS confirmed that sensitive personal information and protected health information in its systems may have been accessed or acquired by an unauthorized third party between August 31 and September 14, 2024. As a result, ACHPS began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth and birth certificate
- Passport number
- Government identification number
- Driver’s license number
- Financial information (account number, routing number, security code, payment card number, payment card expiration date)
- Health insurance information
- Medical information (medical record number, mental or physical condition, diagnosis/treatment, procedure type, provider name, prescriptions, biometric data)
- Student information
- Marriage certificate
- Mother’s maiden name
- Digital signature
- Alien registration number
- Username and password
As a result of the breach, Albany College of Pharmacy and Health Sciences posted notice of the breach on its website, and on August 25, 2025, College Hometown Pharmacy filed official notice of the data breach with the U.S. Department of Health and Human Services’ Office for Civil Rights.1,4 A link to the breach repots are below.
If you have received a breach notice from College Hometown Pharmacy or Albany College of Pharmacy and Health Sciences:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
