Skip to main content
Back to overview
High

Eckerd Connects detects cybersecurity incident, exposing personal and health information

Eckerd Connects Data Breach Class Action Lawsuit Posted: December 18, 2025 -- Eckerd Connects data breach class action lawsuit investigation.

Key points

  • Cybersecurity incident detected on or around November 11, 2024.
  • Unauthorized access to network between November 3 and November 11, 2024.
  • Potentially 68,585 individuals affected.

Connected intelligence

Signal brief

Follow the organization, likely method and potential impact to explore connected Shadow Tier intelligence.

02

Likely method

Ransomware

Threat source not confirmed

03

Potential impact

Data Exposure

Confidentiality, Availability

Published
Nov 11, 2024
Updated
Jul 22, 2026
Confidence
High
Evidence
2 sources

Structured assessment

Signal analysis

This analysis groups the signal by industry, likely incident action and impacted security area. It helps compare this signal with other published signals without treating the labels as final determinations.

Threat source

Threat source not confirmed

Watch phishing, executive impersonation and account-takeover exposure.

Business impact

Potential operational disruption
Impact area
Confidentiality, Availability
Likely asset
User or customer data

Mentioned entities

EckerdData DisclosureEckerd ConnectsAction Lawsuit PostedAbington ColeElleryEckerd Connects andApproximatelyEckerd Youth Alternatives IncAccording

Quick context

Questions about this signal

What happened in this signal?

Eckerd Connects Data Breach Class Action Lawsuit Posted: December 18, 2025 -- Eckerd Connects data breach class action lawsuit investigation. Abington Cole + Ellery is investigating the data breach recently announced by Eckerd Connects and may be filing a class action lawsuit on behalf of victims. In mid-December 2025, Eckerd Connects disclosed a security incident involving unauthorized access to sensitive data, which took place or around between November 3, 2024 and November 11, 2024 . Approximately 68,000 individuals were affected by the Eckerd Connects data breach, and breached data may include, but is not necessarily limited to: first and last name, address, date of birth, Social Security number, driver’s license number or other state identification number, tax identification number, and medical data . As a result of the data breach, Eckerd Connects is offering 12 months of free credit monitoring and/or identity theft protection services to some affected individuals. Eckerd Youth Alternatives Inc., doing business as Eckerd Connects, says it detected suspicious activity in its network environment on or around November 11, 2024. The organization reports that it responded right away by taking certain systems offline to contain the issue, and it brought in outside incident-response and forensic specialists to investigate what happened and determine the scope of any information exposure. According to Eckerd Connects, the investigation ultimately concluded that an unauthorized party may have accessed or acquired personal information during an eight day window between November 3, 2024 and November 11, 2024, though the organization says it did not complete its “extensive forensic investigation and manual document review” until November 17, 2025. The notice states the potentially impacted data could include names, addresses, dates of birth, Social Security numbers, driver’s license/state ID numbers, tax identification numbers, and medical information (and it notes the incident involved information that may include HIPAA-defined protected health information). The public notice does not spell out the specific intrusion method (for example, whether it began with phishing, malware, or a software vulnerability), focusing instead on the detection, investigation, and what data may have been involved. Eckerd Connects says that, starting December 17, 2025, it began notifying people whose information may have been included in the files involved, and it provided “best practices” for protecting information. The notice also lists steps people can take to reduce risk, including monitoring health insurance “explanation of benefits” statements for unfamiliar services, obtaining and reviewing credit reports, and considering a fraud alert or security freeze with the major credit bureaus. For questions, Eckerd Connects set up a dedicated toll-free response line at (866) 291-2447 (Monday–Friday, 8:00 a.m.–5:30 p.m. CT). Additional information about the Eckerd Connects data breach may be found here: Eckerd Connects Notice of Data Security Incident . The Eckerd Connects Website may also have additional information about or provide periodic updates regarding the data breach. Eckerd Youth Alternatives Inc., operating as Eckerd Connects, began operations in 1968 when it was established in Florida. The founders aimed to create a supportive environment for young people facing challenges, drawing from their personal commitment to improving outcomes for children in need. Over the decades, the organization has grown from its initial focus on youth programs to encompass a wider array of community services, adapting to changing social needs while maintaining a dedication to family stability and individual growth. Today, Eckerd Connects provides a variety of programs centered on education, employment, and family support. These include vocational training and career guidance through initiatives like Job Corps centers, where participants gain skills for in-demand jobs. The organization also delivers behavioral health services, foster care placement, adoption assistance, and interventions for families at risk, alongside community-based efforts to prevent juvenile delinquency and support those experiencing homelessness. With operations spanning 20 states across the United States, Eckerd Connects reaches diverse populations through localized services that can be located via program searches. It emphasizes long-term planning, such as strategies extending through 2029, to enhance workforce readiness and educational opportunities. The non-profit continues to rely on donations and community involvement to sustain its work in building resilient individuals and stronger communities. Eckerd Connects Data Breach Notification (Maine) For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach? This website is not associated with nor authorized by Eckerd Connects or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations . Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks Type free text and combine it with operators like country: , group: , sector: , website: , before: / after: , +infostealer / -infostealer and +press / -press .

When was this signal reported?

Shadow Tier lists Nov 11, 2024 as the signal date.

Which organization is connected to this signal?

Eckerd is the organization connected to this public signal.

Explore Eckerd
Which attack pattern is relevant?

This signal is connected to current ransomware incidents based on its reported incident context.

Explore current ransomware incidents
Which impact area is relevant?

This signal is connected to data exposure and breach intelligence based on its reported consequences.

Explore data exposure and breach intelligence