$6.8M Rite Aid data breach class action settlement

Rite Aid agreed to a $6.8 million class action lawsuit settlement to resolve claims it failed to prevent a 2024 data breach that compromised customer information.

The settlement benefits consumers whose personal information was compromised in the Rite Aid data breach on June 6, 2024.

According to the lawsuit, Rite Aid could have prevented the breach with reasonable cybersecurity measures, and that they failed to inform on the data breach in a timely manner. 

The Rite Aid data breach allegedly compromised sensitive customer information, such as names, addresses, birth dates and driver’s license numbers. 

Rite Aid is a retail pharmacy chain in the United States that sells prescription medications, over-the-counter drugs, health and wellness products, personal care items and general merchandise.

Rite Aid has not admitted any wrongdoing but agreed to a $6.8 million settlement to resolve the data breach class action lawsuit. In addition, Rite Aid has agreed to implement better security measures.

Under the terms of the Rite Aid settlement, class members can receive either a documented loss payment or a cash fund payment.

Documented loss payments are available to class members who can provide documentation of expenses and losses related to the data breach. These payments are capped at $10,000 per person.

Cash fund payments are available to class members who do not have documentation of expenses and losses related to the data breach. These payments will vary depending on the number of claims filed and the amount of the settlement fund remaining after documented loss payments are paid.

The deadline for exclusion and objection is June 6, 2025.

The final approval hearing for the Rite Aid data breach settlement is scheduled for July 17, 2025.

To receive settlement benefits, class members must submit a valid claim form by July 7, 2025.

Who’s Eligible

The settlement benefits individuals whose personal information was compromised or potentially compromised in the Rite Aid data breach disclosed in June 2024, including those who received a data breach notification.

Potential Award

Up to $10,000 in documented losses or a cash payment.

Proof of Purchase

For a documented loss payment, reasonable documentation includes credit card statements, bank statements, invoices, telephone records, screenshots and receipts.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

07/07/2025

Case Name

Bianucci, et al. v. Rite Aid Corp., Case No. 2:24-cv-03356-HB, in the U.S. District Court for the Eastern District of Pennsylvania

Final Hearing

07/17/2025

Settlement Website

RiteAidDataSettlement.com

Claims Administrator

Rite Aid Data Breach Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
[email protected]
833-421-7672

Class Counsel

Andrew W. Ferich
AHDOOT & WOLFSON P.C.

Kevin Laukaitis
LAUKAITIS LAW LLC

Benjamin F. Johns
SHUB JOHNS & HOLBROOK LLP

Thomas E. Loeser
COTCHETT PITRE & MCCARTHY LLP

Ashley M. Crooks
HAUSFELD LLP

Defense Counsel

Mark S. Melodia
Mark H. Francis
Caitlin F. Saladrigas
HOLLAND & KNIGHT