Social EngineeringHealthcareRetail & ConsumerHealthcarePretextingStolen CredentialsTargetedData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Rite Aid Corporation
bd_f56081669f275cda · schema v1 · pii pii-v1
Full breach record for Rite Aid Corporation →On June 6, 2024, an unknown actor impersonated a Rite Aid employee to compromise credentials and access business systems. Detection occurred within 12 hours. By June 17, data from purchases (Jun 2017–Jul 2018) was confirmed exfiltrated: name, address, DOB, driver's license/gov-ID. No SSNs, financial, or patient data affected. ~2.2M individuals nationally; 30,137 Maine residents. Kroll monitoring (12 mo.) offered.
Leak gap clock✗ Leak >180d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 370 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_207d49685b6d18dfMontana State AGfiled 2024-07-15Candidate
- bd_4ecedaca9ccb3324California State AGfiled 2024-07-15Verified
- bd_889db9b4ae4e89f7Oregon State AGfiled 2024-07-15Verified
- bd_a417384d21d4f0c1Vermont State AGfiled 2024-07-15Verified
Show 4 more filings ↓Show fewer ↑
- bd_b4a3decb3cef6121Washington State AGfiled 2024-07-15Verified
- bd_c885a91972cf27f3Indiana State AGfiled 2024-07-15Verified
- bd_e9b3a4c075cb2fdaDelaware State AGfiled 2024-07-15Verified
- bd_eefa59da13cd3784New Hampshire State AGfiled 2024-07-15Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4bace65-85df-4fff-b99f-f8fd390bb41a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2024
- Raw hash
- 2253175f1275d4a8add051bb3f9cf5c6b4d62479d5d1fde4b5d9bd6bfb99e80e
Reporting entity
- Name
- Rite Aid Corporationnorm: rite aid
- Domain
- riteaid.com
- Industry
- Healthcare / Retail Pharmacy
Victim entity
- Name
- Rite Aid Corporationnorm: rite aid
- Domain
- riteaid.com
- Industry
- Healthcare / Retail Pharmacy
- Industry
- HealthcarellmRetail & Consumerllm
Incident
- Discovered
- Jun 20, 2024
- Materiality determined
- Jun 17, 2024
- Notification sent
- Jul 15, 2024
- Affected individuals
- 30,137
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1566 Phishing
- Threat actor
- External
- Regulator citations
- Reported to law enforcementReported to federal regulatorsReported to state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 20, 2024→ Filed with AG: Jul 15, 202425d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.