MedImpact Healthcare Systems

MedImpact identified unauthorized activity in its network in October 2025, and the Qilin ransomware group claims it exfiltrated the data before listing MedImpact on its leak site. The entry point is never named. As a pharmacy benefit manager, MedImpact sits beneath unnamed health plans, employers, and government clients, holding each member's prescriptions, treatment records, and Social Security numbers in one system. Nobody has said how Qilin got in, which is its own answer about what wasn't being watched.