PHP Vulnerability Responses by Company

Ridgeway Pharmacy, Ltd.

Companies / web services
Aliases / services
Ridgeway Pharmacy / RidgewayRX / Ridgeway Pharmacy, Ltd.
Official website
https://ridgeway.pharmacy/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Ridgeway pharmacy website built by an external vendor

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

A September 21, 2026 notice described unauthorized access to a vendor-built pharmacy website. Ridgeway learned of possible personal-data involvement on August 21, 2026. Potentially affected records included addresses, birth dates, health and insurance information; its internal systems were not involved.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review account statements, health-plan explanations of benefits and credit reports, and report suspicious charges or transactions. Eligible recipients should use their notice's enrollment code and observe the monitoring enrollment deadline of 90 days from the letter date.

Official service URL

Source URLs

  1. Official operator evidencehttps://ridgeway.pharmacy/contact-usService and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/CA%20-%20Adult%20-%20Redacted.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Ridgeway Pharmacy, Ltd. and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments