Breachesby GlyphRite Aid
Disclosed Jul 29, 202013,600 affectedConfirmed
Rite Aid Corporation, the covered entity (CE), reported that documents containing the protected health information (PHI) of approximately 13,600 individuals was stolen during looting due to civil unrest. The PHI involved included names, addresses, birthdates, and prescription information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional physical and security safeguards to better protect its sensitive data.
What is known
| People affected | 13,600 (as reported to HHS) |
|---|---|
| Disclosed | Jul 29, 2020 |
| Attack | Lost or stolen device |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Rite Aid
Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesPhishing exposed names, addresses, dates of birth and government IDs. Reported to the California AG.Phishing2.2M affectedRetailUSJul 15, 2024Hacking breachHacking exposed names and health records. Reported to the California AG.23K affectedHealthcareUSJul 19, 2023Breach, details not statedBreach notice filed with the California AG, details not stated.USOct 1, 2018Breach, details not statedBreach notice filed with the Indiana AG, details not stated.19K affectedHealthcareUSMay 17, 2017Hacking breachHacking exposed names, payment cards, emails, phone numbers, addresses and health records. Reported to the California AG.2,345 affectedHealthcareUSJun 3, 2015Breach, details not statedExposed names and health records. Reported to the HHS archive.2,900 affectedHealthcareUSDec 7, 2011
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.