Skip to content

CVS Pharmacy

Disclosed Sep 11, 201511 years ago323,139 affectedConfirmed

Official notice

What is known

People affected323,139 (as reported by the organization)
DisclosedSep 11, 2015
HappenedJun 19, 2014
AttackNot stated
Data exposedNot stated
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: CVS Pharmacyoag.ca.gov · Official notice
Indiana Attorney General 2015 data breach report: CVS Pharmacyin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CASep 11, 2015
Indiana AGresidents of INSep 11, 201510,928

Other breaches at CVS Pharmacy

BreachAffected
Disclosed Feb 16, 2024Feb 16, 20242 years agoInsider1,896
Disclosed Sep 10, 2021Sep 10, 20215 years agoHacking6,221
Disclosed Jul 24, 2020Jul 24, 20206 years agoLost or stolen device26K
Disclosed Jan 30, 2019Jan 30, 20197 years agoLost or stolen device5,645
Disclosed Oct 13, 2017Oct 13, 20178 years agoLost or stolen device836
History of this record
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 323139 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about CVS Pharmacy

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.