Rite Aid Corporation

Rite Aid Corporation reported a data security incident involving its third-party service provider, PNI Digital Media, which hosts the mywayphotos.riteaid.com platform. Malware on PNI's servers allowed unauthorized access to customer data between August 20, 2014, and July 14, 2015. Compromised data included names, addresses, phone numbers, email addresses, and payment card information (including card numbers, security codes, and expiration dates). Rite Aid shut down the affected online and mobile photo services and provided one year of complimentary credit monitoring and identity theft protection through Kroll to affected individuals.