PhysicalTheftData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Walgreen Co.
bd_f200ba9cbedf2955 · schema v1 · pii pii-v1
Full breach record for Walgreen Co. →Walgreen Co. reported a physical theft incident occurring between May 26 and June 5, 2020, where intruders broke into multiple California Walgreens stores, stealing pharmacy records, hard drives, and automation devices. The breach compromised customer PII (names, addresses, DOB, driver's licenses) and PHI (prescriptions, clinical info). Walgreens notified affected individuals, coordinated with law enforcement, and offered one year of Experian IdentityWorks monitoring.
California clockDiscovered Jun 5, 2020 → Notified Jul 24, 202049d ✓ CA 60-day OK7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192394
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2020
- Raw hash
- 73da5147358b99b67ab191590a8320dfcf2c05d10a74c0198fc9c5efb5a1e490
Reporting entity
- Name
- Walgreen Co.norm: walgreen
- Domain
- walgreens.com
Victim entity
- Name
- Walgreen Co.norm: walgreen
- Domain
- walgreens.com
Incident
- Discovered
- Jun 5, 2020
- Materiality determined
- —
- Notification sent
- Jul 24, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 5, 2020→ Notified: Jul 24, 202049d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.