About Chiesi USA, Inc.
Chiesi USA, Inc., a healthcare organization located in Cary, NC, experienced a data breach affecting 1,835 individuals, including one resident from Maine. The breach was submitted by Cristina Messerschmidt, an external counsel. The breach involved unauthorized access to Chiesi’s systems, resulting in compromised personal information. Notifications were sent to affected individuals, and identity theft protection services were offered.
What Happened
On August 28, 2025, we learned of potential unauthorized access to our U.S.-based systems. We launched our investigation in partnership with third-party cybersecurity specialists to determine the nature and scope of the incident and activated our remediation and recovery efforts. Following the completion of our investigation, we determined an unauthorized third party accessed certain information maintained on our U.S.-based systems. We have since determined this access to be the result of an IT security issue that impacted part of our internal IT infrastructure. With the support of third-party specialists, we began a review of the data affected to identify the specific information and individuals impacted. On December 9, 2025, we determined your personal information was involved.
The breach affected 1,835 people when an unauthorized third party accessed Chiesi’s systems on June 23, 2025. The incident impacted the internal IT infrastructure, compromising personal information.
Next Steps
Affected users should carefully review the “Steps You Can Take to Protect Your Information” document provided by Chiesi USA, Inc. This document details the services offered and how to activate them. Users are encouraged to remain vigilant against identity theft and fraud by regularly checking their credit reports and account statements for any unusual activity or errors. For any further questions, users can contact the dedicated response line provided in the notification letter.
Identity Theft Protection Services
Chiesi USA, Inc. is offering 24 months of complimentary credit monitoring and identity restoration services through Experian for those impacted by the breach. Affected individuals are encouraged to enroll by March 31, 2026, using the provided activation code. The services include credit monitoring with alerts and fraud resolution support without requiring a credit card for enrollment. These measures aim to help individuals protect their identities and respond effectively to any potential identity theft issues.