Rite Aid data breach reportedly affects 2.2M customers

Rite Aid data breach overview: 

• Who: Rite Aid confirmed a cyberattack last month led to a data breach. 
• Why: The drugstore chain attributed the data breach to an external system breach and said the incident affected 2.2 million of its customers. 
• Where: The data breach affected certain Rite Aid customers nationwide. 

Rite Aid confirmed this week that a cyberattack against the drugstore chain last month caused a data breach that it says affected 2.2 million of its customers. 

The number of affected customers is lower than the 45 million initially given by the ransomware group claiming to be behind the cyberattack, reports PCMag. 

Rite Aid, in a notice filed with Maine’s attorney general, said the data breach occurred June 6 was discovered June 20 and was the result of an external system breach. 

“On June 6, 2024, an unknown third party impersonated a company employee to compromise their business credentials and gain access to certain business systems,” the company said, in a sample letter sent to affected customers. 

Information compromised in the data breach included purchaser names, addresses, birthdates and driver’s license numbers or other forms of identification presented at the time of a purchase between June 6, 2017 and July 30, 2018, according to the letter. 

Rite Aid confirms no financial information exposed in data breach

Rite Aid confirmed no financial information, patient information or Social Security numbers were exposed in the data breach and said it is implementing “additional security measures” to try and prevent future incidents. 

“We take our obligation to safeguard personal information very seriously and are alerting you about this issue in case you would like to take any additional steps to help protect yourself,” the company said. 

Rite Aid customers affected by the data breach have been offered 12 months of complimentary identity theft protection and credit monitoring services through Kroll. 

The ransomware gang behind the cyber attack demanded Rite Aid make a ransom payment to keep the exposed data secret, however the group claims negotiations have been cut off, reports PCMag. 

Rite Aid reportedly has not commented on whether it would be making a ransom payment. The company previously disclosed last July that it suffered a separate data breach that it said may have compromised the personal information of its customers. 

Were you affected by the Rite Aid data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Ticketmaster class action claims massive data breach impacts 500M+
• RockYou2024 file releases 10 billion unique passwords
• Twilio data breach affects customer phone numbers
• Intuit class action claims co. failed to prevent TurboTax, Credit Karma data breach