Breachesby GlyphCVS Pharmacy
Disclosed Jan 30, 20195,645 affectedConfirmed
The covered entity (CE), CVS Pharmacy, reported that protected health information (PHI) was erroneously placed in a storage container maintained by its business associate, Target Corporation. Subsequently, the storage container was vandalized and the PHI was stolen. This breach incident affected 5,645 individuals. The types of PHI involved included names, addresses, dates of birth, and prescription information. Following this breach incident, CVS notified OCR, affected individuals, and the media.
What is known
| People affected | 5,645 (as reported to HHS) |
|---|---|
| Disclosed | Jan 30, 2019 |
| Attack | Lost or stolen device |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at CVS Pharmacy
Insider breachInsider exposed names and health records. Reported to the HHS archive.1,896 affectedHealthcareUSFeb 16, 2024Hacking breachHacking exposed names and health records. Reported to the California AG.6,221 affectedHealthcareUSSep 10, 2021Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.26K affectedHealthcareUSJul 24, 2020Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.836 affectedHealthcareUSOct 13, 2017Breach, details not statedBreach notice filed with the California AG, details not stated.323K affectedHealthcareUSSep 11, 2015
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.