Shop-Rite Supermarkets
Disclosed Oct 30, 20178 years ago12,172 affectedConfirmed
The covered entity (CE), Shop-Rite Supermarkets, Inc., reported that an employee improperly discarded an electronic signature device which contained the electronic protected health information (ePHI) of 12,172 individudals. The ePHI involved included names, telephone numbers, dates of birth, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data. The CE also retrained its staff.
What is known
| People affected | 12,172 (as reported to HHS) |
|---|---|
| Disclosed | Oct 30, 2017 |
| Discovered | Aug 19, 2017 |
| Happened | Feb 1, 2016 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Shop-Rite Supermarketsjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Shop-Rite Supermarkets (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Oregon DOJresidents of OR | Oct 30, 2017 | 12,172 |
| HHS archivetotal | Nov 3, 2017 | 12,172 |
History of this record
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 12172 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Shop-Rite Supermarkets, Inc., reported that an employee improperly discarded an electronic signature device which contained the electronic protected health information (ePHI) of 12,172 individudals. The ePHI involve · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.