Skip to content

CVS Caremark

Disclosed May 13, 20251 year ago2,599 affectedConfirmed

Official notice

The business associate (BA), CVS Caremark reported that it experienced a breach incident that affected the protected health information (PHI) of 2,599 individuals. The PHI involved included demographic information. The BA notified HHS, the affected individuals, and the media. In response to the breach, the BA retrained employees and implemented administrative, technical and security safeguards.

What is known

People affected2,599 (as reported to HHS)
DisclosedMay 13, 2025
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): CVS Caremark (Business Associate, RI)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalMay 13, 20252,599

Other breaches at CVS Caremark

BreachAffected
Disclosed Jun 28, 2021Jun 28, 20215 years agoInsider3,064
Disclosed Oct 26, 2012Oct 26, 201213 years agoLost or stolen device4,305
Disclosed May 11, 2011May 11, 201115 years agoLost or stolen device654
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about CVS Caremark

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.