DisclosureLens
UnknownOtherLow

Rite Aid Corporation

bd_771fb9ee915a07c8 · schema v1 · pii pii-v2

Severity

Low

Discovered

Jun 6, 2024

Filed

Jul 1, 2024

To disclose

—

Affected

Withheld by the regulator

Linked

13 filings

Confidence

95%
Full breach record for Rite Aid Corporation →10 incidents on file

RITE AID CORPORATION filed a data-breach notice with the Illinois Attorney General in July 2024 (case 24-07-017). The register records the breach as discovered on June 6, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Leak gap clock✗ Leak >180d
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jun 6, 2024

Discovered

Jul 1, 2024

Filed

This filing is one of 13 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 356 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 14d gap

Showing first 10 of 12 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
Illinois State AGJul 1 · first · this page
Montana State AG+14d
California State AG+14d
South Carolina State AG+14d
Massachusetts State AG+14d
Oregon State AG+14d
Vermont State AG+14d
Washington State AG+14d
Indiana State AG+14d
Delaware State AG+14d
New Hampshire State AG+14d

Pattern: first filing Jul 1 (IL), last Jul 15 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.