CVS Pharmacy, Inc.
5 disclosures across 3 jurisdictions · 2022-02-11 → 2026-03-20. Severity score: 7 across 4 incidents (max per incident: crit=4 high=3 med=2 low=1; per-filing sum: 8).
Scope. This scorecard covers filings naming this entity record. Related records are scored separately: CVS HEALTH CORPORATION (parent record).
1825-day window · this entity as victim
none in window
no clock evaluations
max per incident · per-filing sum: 8
Sector context · Healthcare
- This entity:
- no clock-evaluable filing
- Sector cohort:
- 19.2% on-time (n=2,373 clock verdicts)
Cohort: 9,576 filings from 4,215 organisations carrying NAICS 62 on the filing itself, same 1825-day window; merged entities counted once. Both percentages count clock verdicts through the same registry — a filing with no evaluable clock is excluded from both rather than counted as on time.
Compliance timing by regulator
Notice timing computed from the dates recorded in each filing — an indicative estimate from an automated clock, not a legal determination. Click any chip for this entity's source filings.
- HIPAA0 on-time · 0 late · 2 informational · 2
us-ca — clock not computable from the dates recorded in the filings
us-ma — clock not computable from the dates recorded in the filings
Regulators holding filings from this entity
Every regulator that has received a visible filing naming this entity, all time — filings first.
- HHS OCR (6)
- Massachusetts State AG (3)
- California State AG (2)
- HHS OCR enforcement (1)
- New Hampshire State AG (1)
- South Carolina State AG (1)
Breach History (5-Year Lookback)
Historical incident recurrence, cumulative exposure, and per-jurisdiction compliance record
within lookback window
late notice filings
median days between incidents
Per-jurisdiction compliance record
| Jurisdiction | On-time | Late | Rate |
|---|---|---|---|
| us-ri | 0 | 0 | — |
Cumulative data type exposure
Disclosure timeline
Most-recent 100 filings. Click a row to open the disclosure detail.