Walgreen Co. data breach (2020)

Breach window

Jan 9, 2020 → Jan 15, 2020

When the intrusion reportedly occurred, per the linked filings

Breach discovered

Jan 15, 2020

Reported by CALIFORNIA AG filing

44 days

ILHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Feb 28, 2020bd_61bdc54c0c5fcd19

Walgreen Company reported to HHS on 2020-02-28 a Unauthorized Access/Disclosure affecting 6681 individuals. Breached information located on Network Server. An error in its database allowed the protected health information (PHI) of 6,681 individuals to be viewed by others. The PHI involved included names, addresses, medications, health insurance information, and financial information.

Affected (this filing): 6,681

HHS notified

🐻California State AGMost recent

Filed Feb 28, 2020bd_82bc5a0283667f8d

Walgreen Co. disclosed a January 2020 incident where an internal application error in its mobile app allowed customers to view other customers' secure messages. Affected data included names, prescription numbers, drug names, store numbers, and shipping addresses. No financial or SSN data was involved. Walgreens disabled the feature and implemented a technical correction.

Walgreen Co.

Litigation Timing

Timeline