Perrigo Company Data Breach — Case File

From the AG filing description

Perrigo Company is a prominent player in the self-care, over-the-counter (OTC) health, and pharmaceutical manufacturing sector, providing essential consumer wellness products, generic pharmaceuticals, and nutritional items to millions of households. Because of its core business operations, Perrigo manages extensive supply chains, global distribution networks, and sophisticated consumer-facing platforms. In doing so, the company routinely collects, processes, and stores vast quantities of sensitive data, including proprietary corporate information, extensive employee records, administrative files, and detailed consumer or vendor transaction logs, making it an attractive target for malicious cyber actors seeking high-value institutional and personal records. In 2026, Perrigo Company reported a significant data security incident to the Indiana Attorney General, raising urgent concerns among consumers, employees, and legal advocates alike. While investigations into corporate data breaches of this scale typically reveal unauthorized access to internal network environments, third-party vendor compromises, or sophisticated ransomware deployment, incidents affecting manufacturing and pharmaceutical entities often exploit vulnerabilities in corporate IT infrastructure, supply chain software, or legacy enterprise resource planning (ERP) databases. Once inside, unauthorized actors can dwell undetected within the network, exfiltrating large volumes of confidential files before deploying encryption or demanding extortion. The nature of the data exposed in corporate and manufacturing data breaches typically spans multiple categories of sensitive personal and financial information. When a breach impacts an enterprise like Perrigo, the compromised records frequently include full names, dates of birth, Social Security numbers, banking details, home addresses, and internal payroll or human resources documentation. The exposure of this information creates severe, long-term risks for affected individuals. Social Security numbers and dates of birth form the foundational triad for identity theft, allowing bad actors to open fraudulent credit accounts, secure unauthorized loans, or intercept government tax refunds. Furthermore, compromised employment or financial data exposes victims to targeted spear-phishing campaigns, account takeovers, and persistent financial fraud that can take years to remediate. Under federal and state regulatory frameworks, including the Indiana Disclosure of Security Breach Law and the broader mandates of the Federal Trade Commission Act, corporate entities like Perrigo Company maintain a strict legal duty to implement and maintain reasonable data security measures. These obligations require organizations to encrypt sensitive files, deploy advanced intrusion detection systems, conduct regular vulnerability assessments, and promptly patch known software flaws. A data breach of this magnitude often serves as prima facie evidence of a systemic security failure, suggesting that the company may have fallen short of industry-standard security protocols and failed in its legal obligation to safeguard the private information entrusted to its care. Receiving an official data breach notification letter from Perrigo Company carries profound legal implications; it serves as a formal corporate admission that your confidential information was compromised due to inadequate security practices. Crucially, receipt of this letter establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the company accountable. Under modern data privacy jurisprudence, victims do not need to prove that they have already suffered actual financial loss or identity theft to seek legal recourse; the imminent threat and increased risk of future harm are sufficient. Our firm handles these complex class action cases on a strict contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.