Rite Aid class action alleges data breach affects 2.2M customers

Rite Aid data breach class action overview: 

• Who: Plaintiff Erica Judka, a Rite Aid customer, has sued the pharmacy chain.
• Why: She claims the company was negligent with its cybersecurity, leading to a data breach.
• Where: The Rite Aid class action lawsuit was filed in a Pennsylvania federal court.

Rite Aid has been hit with a class action lawsuit after a data breach in June exposed the information of over 2.2 million customers. 

Plaintiff Erica Judka filed the class action complaint against Rite Aid Corp. on July 26 in a Pennsylvania federal court, alleging negligence.

Judka clams the pharmacy chain lacked sufficient cybersecurity measures, leading to a significant data breach.

What happened? 

The Rite Aid data breach was detected on June 6, the company said in a notice filed with Maine’s attorney general. It said hackers entered its system using an employee’s credentials.

The data breach compromised information such as names, addresses, birth dates, and driver’s license numbers of customers who made purchases between June 2017 and July 2018, the lawsuit states. 

Rite Aid acknowledged the breach by June 17 and informed affected customers via letters dated July 15. It said at the time that no financial information, patient information or Social Security numbers were exposed in the data breach and said it is implementing “additional security measures” to try and prevent future incidents. 

Rite Aid failed to anticipate threats, lawsuit says

Judka argues that Rite Aid failed to anticipate the threat of cyberattacks, which have become increasingly common in recent years. 

She says the company failed to provide detailed information about the breach, including the identity of the attackers and whether the data was held for ransom or discovered on the dark web.

In response to the breach, Rite Aid offered affected customers free credit monitoring and identity restoration services through Kroll. However, Judka says this response “woefully inadequate.” 

She claims that she has received a surge in spam and robocalls since the hack. And she argues that she and others remain at risk due to their personal information still being stored in Rite Aid’s systems. 

Judka seeks to represent a class of over 2.2 million affected people in the U.S. She’s suing for negligence, breach of fiduciary duty, and breach of confidence and is seeking certification of the class action, damages, fees, costs and a jury trial. 

The lawsuit also calls on Rite Aid to implement regular security testing and improve its cybersecurity.

Were you affected by this Rite Aid data breach? Let us know in the comments.

Judka is represented by Kevin Laukaitis of Laukaitos Law LLC and Andrew J. Sciolla of Sciolla Law Firm LLC. 

The Rite Aid data breach class action lawsuit is Erica Judka v. Rite Aid Corporation, Case No. 2:24-cv-03381, in the U.S. District Court for the Eastern District of Pennsylvania.

Read About More Class Action Lawsuits & Class Action Settlements:

• HealthEquity data breach impacts 4.3M customers
• Consumers file AT&T class actions following massive data breach
• Trello data breach affects 15M users’ email addresses
• Disney Slack message data breach allegedly contains 1.1TB of data