Breachesby GlyphWalgreen
Disclosed Oct 1, 20242,708 affectedConfirmed
The covered entity (CE), Walgreen Co., reported that the protected health information (PHI) of 2,708 individuals was lost during transport. The PHI involved included names, addresses, medications, and other treatment information. The CE notified HHS, law enforcement, affected individuals, and the media. In its mitigation efforts, the CE terminated its business relationship with the business associate. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 2,708 (as reported to HHS) |
|---|---|
| Disclosed | Oct 1, 2024 |
| Attack | Lost or stolen device |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Walgreen
Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.16K affectedHealthcareUSJan 8, 2021Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the California AG.80K affectedHealthcareUSDec 3, 2019Lost or stolen device breachLost or stolen device exposed names, payment cards and health records. Reported to the California AG.160K affectedHealthcareUSDec 6, 2013Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.1,240 affectedHealthcareUSJul 30, 2012
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.