This is just plain irresponsible behaviour by PillPack, nothing to do with hacking.
No, this is just plain irresponsible behavior by those who share infomation to PillPack and others.
Recently, I noticed that when I picked up a prescription for a (for me new) medication that's mostly used for one purpose, I suddenly got dozens of spam e-mails wanting to "help" me with a particular diagnosis I don't have. And that's the few that went through the double layer spam filter. It was way too pervasive to be a coincidence.
It's clear that the US prescription system leaks like a sieve, and that even spammers have access to people's prescription history.
Can we go back to paper prescriptions that don't enter a database, please?