Breachesby GlyphRite Aid
Disclosed Jul 19, 202323,433 affectedConfirmed
The covered entity (CE), Rite Aid Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 23,433 individuals. The PHI involved included names, dates of birth, addresses, medications, and health insurance information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE installed manufacturer-provided software patches and implemented additional technical safeguards to better protect sensitive data.
What is known
| People affected | 23,433 (as reported to HHS) |
|---|---|
| Disclosed | Jul 19, 2023 |
| Discovered | May 31, 2023 |
| Happened | May 27, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Rite Aid
Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesPhishing exposed names, addresses, dates of birth and government IDs. Reported to the California AG.Phishing2.2M affectedRetailUSJul 15, 2024Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.14K affectedHealthcareUSJul 29, 2020Breach, details not statedBreach notice filed with the California AG, details not stated.USOct 1, 2018Breach, details not statedBreach notice filed with the Indiana AG, details not stated.19K affectedHealthcareUSMay 17, 2017Hacking breachHacking exposed names, payment cards, emails, phone numbers, addresses and health records. Reported to the California AG.2,345 affectedHealthcareUSJun 3, 2015Breach, details not statedExposed names and health records. Reported to the HHS archive.2,900 affectedHealthcareUSDec 7, 2011
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 23433by backfillSource
empty to The covered entity (CE), Rite Aid Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 23,433 individuals. The PHI involved included names, dates of birth, addresses, medicationby backfillSource
other to healthby backfillSource
unknown to hackingby backfillSource
empty to 2023-05-31by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.