Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Walgreen

Disclosed Dec 3, 201980,176 affectedConfirmed

Official notice

The covered entity (CE), Walgreen Company, reported that it experienced multiple burglaries at several locations that resulted in the theft of paper records and hard drives that contained the protected health information (PHI) of 80,176 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative safeguards to better protect its PHI.

What is known

People affected80,176 (as reported to HHS)
DisclosedDec 3, 2019
HappenedMay 26, 2020
AttackLost or stolen device
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Walgreen
Official noticein.gov
Indiana Attorney General 2021 data breach report: Walgreen
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Walgreen (Healthcare Provider, IL)

Notices filed

TotalDec 3, 2019
HHS archive3,700 people
Residents of CAFeb 28, 2020
California AGCount not stated
TotalFeb 28, 2020
HHS archive6,681 people
Residents of CAJul 24, 2020
California AGCount not stated
TotalJul 24, 2020
HHS archive80,176 people
Residents of INFeb 12, 2021
Indiana AG2 people

Other breaches at Walgreen

Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.2,708 affectedHealthcareUSOct 1, 2024Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.16K affectedHealthcareUSJan 8, 2021Lost or stolen device breachLost or stolen device exposed names, payment cards and health records. Reported to the California AG.160K affectedHealthcareUSDec 6, 2013Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.1,240 affectedHealthcareUSJul 30, 2012
History of this record
disclosed2026-09-25
2020-02-28 to 2019-12-03by backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to lost-deviceby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
30 to 80176by backfillSource
summary2026-09-25
empty to The covered entity (CE), Walgreen Company, reported that it experienced multiple burglaries at several locations that resulted in the theft of paper records and hard drives that contained the protected health information (PHI) of 80,176 indby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 30by backfillSource
disclosed2026-09-25
2020-07-24 to 2020-02-28by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Walgreen