Every public data breach

47 disclosed this week · 26,367 on record

Walgreen

Disclosed Dec 6, 2013160,000 affectedConfirmed

Official notice

Walgreens, the covered entity (CE), reported that one of its pharmacies located in Nashville, Tennessee, was burglarized and protected health information (PHI) was stolen. This breach affected 703 individuals and the PHI involved included names, addresses, dates of birth, phone numbers, Social Security numbers, medications prescribed, and health insurance information. The CE notified HHS, affected individuals, the media, local law enforcement, and provided substitute notice. The CE implemented administrative and physical safeguards to better protect its PHI and retrained its staff. The CE also provided complimentary credit monitoring services. OCR obtained assurances that the CE implemented the corrective actions noted.

What is known

People affected160,000 (as reported to HHS)
DisclosedDec 6, 2013
HappenedDec 20, 2017
AttackLost or stolen device
Data exposedNamesPayment cardsHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

Other breaches at Walgreen

History of this record
disclosed2026-09-25
2014-06-06 to 2013-12-06by backfillSource
disclosed2026-09-25
2014-12-15 to 2014-06-06by backfillSource
records2026-09-25
8345 to 160000by backfillSource
disclosed2026-09-25
2015-05-01 to 2014-12-15by backfillSource
disclosed2026-09-25
2015-08-07 to 2015-05-01by backfillSource
records2026-09-25
4500 to 8345by backfillSource
disclosed2026-09-25
2016-03-04 to 2015-08-07by backfillSource
disclosed2026-09-25
2017-02-03 to 2016-03-04by backfillSource
records2026-09-25
910 to 4500by backfillSource
disclosed2026-09-25
2018-04-06 to 2017-02-03by backfillSource
records2026-09-25
703 to 910by backfillSource
disclosed2026-09-25
2018-04-27 to 2018-04-06by backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to lost-deviceby backfillSource
data_types2026-09-25
["names","payment-card"] to ["names","payment-card","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 703by backfillSource
disclosed2026-09-25
2018-06-01 to 2018-04-27by backfillSource
summary2026-09-25
empty to Walgreens, the covered entity (CE), reported that one of its pharmacies located in Nashville, Tennessee, was burglarized and protected health information (PHI) was stolen. This breach affected 703 individuals and the PHI involved included nby backfillSource
data_types2026-09-25
[] to ["names","payment-card"]by backfillSource
disclosed2026-09-25
2018-06-19 to 2018-06-01by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Walgreen