Every public data breach

44 disclosed this week · 26,355 on record

Shop-Rite Supermarkets

Disclosed Oct 30, 201712,172 affectedConfirmed

Official notice

The covered entity (CE), Shop-Rite Supermarkets, Inc., reported that an employee improperly discarded an electronic signature device which contained the electronic protected health information (ePHI) of 12,172 individudals. The ePHI involved included names, telephone numbers, dates of birth, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data. The CE also retrained its staff.

What is known

People affected12,172 (as reported to HHS)
DisclosedOct 30, 2017
DiscoveredAug 19, 2017
HappenedFeb 1, 2016
AttackLost or stolen device
Data exposedNamesHealth
SectorRetail · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to lost-deviceby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 12172by backfillSource
summary2026-09-25
empty to The covered entity (CE), Shop-Rite Supermarkets, Inc., reported that an employee improperly discarded an electronic signature device which contained the electronic protected health information (ePHI) of 12,172 individudals. The ePHI involveby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.

Everything about Shop-Rite Supermarkets