Walmart Inc. data breach (2018)

Breach window
Jan 29, 2018
When the intrusion reportedly occurred, per the linked filings
ARHHS OCRFirst filing
Filed Feb 22, 2018bd_25a77ccbf51c5a63
Walmart, Inc. (AR) reported to HHS on 2018-02-22 an Unauthorized Access/Disclosure affecting 735 individuals. An internal programming error in pharmacy account profiles caused ePHI — including names, contact information, dates of birth, insurance card holder numbers, and prescription history — to be viewable by other patients or their authorized representatives via the online pharmacy portal or record requests. Breached information located in Electronic Medical Records. OCR investigation concluded with CE implementing improved administrative safeguards and quality assurance protocols.
Affected (this filing): 735
HHS notified
🦬Montana State AG
Filed Feb 22, 2018bd_fb92d9b73b729d02
Walmart, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2018-02-22. The breach occurred on 1/29/2018. 5 Montana residents were affected.
Affected (this filing): 5
32 days
ARHHS OCRMost recent
Filed Mar 26, 2018bd_7694c98e7a9d3e4f
Walmart Inc. reported to HHS on 2018-03-26 a Unauthorized Access/Disclosure affecting 741 individuals. Breached information located on Email, Other. A system error caused patient information (names and prescription data) to be viewed by the wrong patient via the CE's app or email. The CE provided breach notification to HHS, affected individuals, and the media, and implemented improved technical safeguards.
Affected (this filing): 741

WALMART INC.

Litigation Timing

Sensitive data

Timeline