UnknownHigh
Rite Aid Corporation
bd_889db9b4ae4e89f7 · schema v1 · pii pii-v1
Full breach record for Rite Aid Corporation →Rite Aid Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2024-07-15. The breach occurred during 6/6/2024 - 6/6/2024. The breach was discovered on 6/6/2024. 2,200,000 individuals were affected. Notice was sent on 7/15/2024.
Leak gap clock✗ Leak >180d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 9 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 370 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_207d49685b6d18dfMontana State AGfiled 2024-07-15Candidate
- bd_4ecedaca9ccb3324California State AGfiled 2024-07-15Verified
- bd_a417384d21d4f0c1Vermont State AGfiled 2024-07-15Verified
- bd_b4a3decb3cef6121Washington State AGfiled 2024-07-15Verified
Show 4 more filings ↓Show fewer ↑
- bd_c885a91972cf27f3Indiana State AGfiled 2024-07-15Verified
- bd_e9b3a4c075cb2fdaDelaware State AGfiled 2024-07-15Verified
- bd_eefa59da13cd3784New Hampshire State AGfiled 2024-07-15Verified
- bd_f56081669f275cdaMaine State AGfiled 2024-07-15Verified
Source provenance
- Source URL
- https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2024
- Raw hash
- bbcb26376ee23204580986969d46e970a8edaee5128cc8a2014ab8402801f930
Reporting entity
- Name
- Rite Aid Corporationnorm: rite aid
- Domain
- riteaid.com
Victim entity
- Name
- Rite Aid Corporationnorm: rite aid
- Domain
- riteaid.com
Incident
- Discovered
- Jun 6, 2024
- Materiality determined
- —
- Notification sent
- Jul 15, 2024
- Affected individuals
- 2,200,000
- Data types
- —
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- Leak >180dOR AG ≤45d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.