Breachesby GlyphCVS Pharmacy
Disclosed Feb 16, 20241,896 affectedConfirmed
The covered entity (CE), CVS Pharmacy, reported that an error on its website allowed the protected health information (PHI) of 1,896 individuals to be viewable by others. The PHI involved included names, addresses, and financial information. The CW notified HHS and the affected individuals. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 1,896 (as reported to HHS) |
|---|---|
| Disclosed | Feb 16, 2024 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at CVS Pharmacy
Hacking breachHacking exposed names and health records. Reported to the California AG.6,221 affectedHealthcareUSSep 10, 2021Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.26K affectedHealthcareUSJul 24, 2020Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.5,645 affectedHealthcareUSJan 30, 2019Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.836 affectedHealthcareUSOct 13, 2017Breach, details not statedBreach notice filed with the California AG, details not stated.323K affectedHealthcareUSSep 11, 2015
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.