
"your" first name etc.
"including potentially your first name, last name, address, date of birth, health diagnosis, and/or medications and prescriptions"
Whose?
Patients'?
(The linked PDF mentions "partnership with one such organization in connection with its patient support programs" but does not really clarify (to me) either to whom this Notice of Data Breach is addressed.)
If indeed patients, why would a drug wholesaler (or pharma company, for that matter) store these apparently non-anonymised data?
Or is this about data of employees of said firms? In which case: health diagnosis, and/or medications and prescriptions??