College Parkside Pharmacy Data Breach Investigation

Recently, College Parkside Pharmacy and Albany College of Pharmacy and Health Sciences (ACHPS) experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on or about September 14, 2024, ACHPS detected unusual activity in its network as a result of a cybersecurity incident.¹ As a result, ACHPS launched an investigation to determine the nature of the incident.

Through its investigation, ACHPS confirmed that sensitive personal information and protected health information in its systems may have been accessed or acquired by an unauthorized third party between August 31 and September 14, 2024. As a result, ACHPS began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Address
• Date of birth and birth certificate
• Passport number
• Government identification number
• Driver’s license number
• Financial information (account number, routing number, security code, payment card number, payment card expiration date)
• Health insurance information
• Medical information (medical record number, mental or physical condition, diagnosis/treatment, procedure type, provider name, prescriptions, biometric data)
• Student information
• Marriage certificate
• Mother’s maiden name
• Digital signature
• Alien registration number
• Username and password

As a result of the breach, Albany College of Pharmacy and Health Sciences posted notice of the breach on its website, and on August 25, 2025, College Parkside Pharmacy filed official notice of the data breach with the U.S. Department of Health and Human Services’ Office for Civil Rights.^1,4 A link to the breach repots are below.