Rite Aid Corporation

Rite Aid Corporation reported that on June 6, 2024, an unknown third party impersonated an employee to compromise business credentials and access systems. The attacker acquired purchaser data (name, address, DOB, driver's license/government ID) for transactions between June 6, 2017, and July 30, 2018. No SSN, financial, or patient data was impacted. Rite Aid detected the incident within 12 hours, terminated access, and is offering identity monitoring via Kroll.

Rite Aid Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2024-07-15. The breach occurred during 6/6/2024 - 6/6/2024. The breach was discovered on 6/6/2024. 2,200,000 individuals were affected. Notice was sent on 7/15/2024.

Affected (this filing): 2,200,000

Rite Aid notified consumers in Vermont of a data breach where an unknown third party compromised business credentials by impersonating an employee. The incident, occurring between June 2017 and July 2018, exposed names, addresses, dates of birth, and driver's license numbers. Rite Aid reported the incident to law enforcement and regulators, engaged Kroll for identity monitoring services, and implemented additional security measures.

Rite Aid Corporation, a health sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2024-06-06 and filed notice on 2024-07-15. 96,270 Washington residents were affected. 39 days elapsed between awareness and notification. 0 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 96,270

Rite Aid Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2024-06-06 and was reported on 2024-07-15. 6,923 Indiana residents were affected. 2,200,000 individuals affected in total.

Affected (this filing): 2,200,000

Rite Aid Corporation disclosed a data breach where an unknown third party used phishing to steal business credentials and access systems. Data from purchases between June 2017 and July 2018 was compromised, including names, addresses, DOBs, and driver's licenses. No SSNs or financial data were impacted. Rite Aid reported to law enforcement and offered Kroll identity monitoring.

Rite Aid Corporation notified New Hampshire and nationwide residents of a security incident where an unknown third party impersonated an employee to compromise business credentials and access systems on June 6, 2024. The breach affected approximately 2.2 million individuals nationwide, including 36,121 New Hampshire residents. Purchaser data associated with retail product purchases was acquired. Rite Aid detected the incident within 12 hours, terminated access, and engaged Kroll for identity monitoring services.

Affected (this filing): 2,200,000

On June 6, 2024, an unknown actor impersonated a Rite Aid employee to compromise credentials and access business systems. Detection occurred within 12 hours. By June 17, data from purchases (Jun 2017–Jul 2018) was confirmed exfiltrated: name, address, DOB, driver's license/gov-ID. No SSNs, financial, or patient data affected. ~2.2M individuals nationally; 30,137 Maine residents. Kroll monitoring (12 mo.) offered.

Affected (this filing): 30,137