Rite Aid

7 breaches2.3M affected in allHealthcareriteaid.com

Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesPhishing exposed names, addresses, dates of birth and government IDs. Reported to the California AG.Phishing2.2M affectedRetailUSJul 15, 2024 Hacking breachHacking exposed names and health records. Reported to the California AG.23K affectedHealthcareUSJul 19, 2023 Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.14K affectedHealthcareUSJul 29, 2020 Breach, details not statedBreach notice filed with the California AG, details not stated.USOct 1, 2018 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.19K affectedHealthcareUSMay 17, 2017 Hacking breachHacking exposed names, payment cards, emails, phone numbers, addresses and health records. Reported to the California AG.2,345 affectedHealthcareUSJun 3, 2015 Breach, details not statedExposed names and health records. Reported to the HHS archive.2,900 affectedHealthcareUSDec 7, 2011

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

Added2026-09-25

Rite Aid, 2011-12-07

data_types2026-09-25

Rite Aid, 2015-06-03["names","payment-card","emails","phone","addresses","health"]

records_basis2026-09-25

Rite Aid, 2015-06-03hhs

records2026-09-25

Rite Aid, 2015-06-032345

disclosed2026-09-25

Rite Aid, 2015-06-032015-06-03

summary2026-09-25

Rite Aid, 2015-06-03On April 27, 2015, rioters in Baltimore, MD broke into, vandalized, and looted eight locations of the covered entity (CE), Rite Aid, taking 2,345 filled prescriptions. The “will-call” prescriptions involved in the breach contained patients’

Added2026-09-25

Rite Aid, 2020-07-29

data_types2026-09-25

Rite Aid, 2023-07-19["names","health"]

records_basis2026-09-25

Rite Aid, 2023-07-19hhs

records2026-09-25

Rite Aid, 2023-07-1923433

summary2026-09-25

Rite Aid, 2023-07-19The covered entity (CE), Rite Aid Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 23,433 individuals. The PHI involved included names, dates of birth, addresses, medication

data_types2026-09-25

Rite Aid, 2015-06-03["names","payment-card","emails","phone","addresses"]

source2026-09-25

Rite Aid, 2015-06-03https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2015.pdf

source2026-09-25

Rite Aid, 2015-06-03https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2016.pdf

Added2026-09-25

Rite Aid, 2017-05-17

source2026-09-25

Rite Aid, 2024-07-15https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdf

source2026-09-25

Rite Aid, 2024-07-15https://ago.vermont.gov/document/2024-07-15-rite-aid-data-breach-notice-consumers

sector2026-09-25

Rite Aid, 2024-07-15retail

data_types2026-09-25

Rite Aid, 2024-07-15["names","addresses","dob","government-id"]

summary2026-09-25

Rite Aid, 2024-07-15Rite Aid said an unknown party impersonated an employee on June 6, 2024 to compromise business credentials and access systems. The attacker acquired names, addresses, dates of birth and driver's license or ID numbers tied to certain retail

title2026-09-25

Rite Aid, 2024-07-15Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchases

domain2026-09-25

Rite Aidriteaid.com

data_types2026-09-25

Rite Aid, 2024-07-15["names"]

records_basis2026-09-25

Rite Aid, 2024-07-15organization

records2026-09-25

Rite Aid, 2024-07-152200000

sector2026-09-25

Rite Aid, 2015-06-03health

attack2026-09-25

Rite Aid, 2015-06-03hacking

occurred2026-09-25

Rite Aid, 2015-06-032014-08-20

sector2026-09-25

Rite Aid, 2023-07-19health

attack2026-09-25

Rite Aid, 2023-07-19hacking