Raley's/Bel Air Mart/Nob Hill General Store, Inc.

Raley's/Bel Air Mart/Nob Hill General Store, Inc. reported the theft of a pharmacy laptop on September 24, 2018. The device contained unencrypted electronic files with personal health information (PHI) for pharmacy patients, including names, dates of birth, health plans, medical conditions, and prescription drugs. The data did not contain SSNs, addresses, or credit card numbers. The company notified law enforcement, investigated the incident, and subsequently encrypted all pharmacy laptops.

On September 24, 2018, a pharmacy laptop containing unencrypted ePHI was stolen from a workforce member's locked car at Raley's/Bel Air Mart/Nob Hill General Store, Inc. (CA), affecting 10,124 individuals. Exposed data included names, dates of birth, diagnoses, and prescription information. Breach was reported to HHS on 2018-10-26. The covered entity reset credentials, disabled the stolen device's account, encrypted laptops, strengthened password formats, and updated its risk analysis and policies. Breached information located on Laptop.

Affected (this filing): 10,124