Skip to content

Rite Aid

7 breaches2.3M affected in allHealthcareriteaid.com

BreachAffected
Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchasesJul 15, 20242 years agoPhishing2.2M
Disclosed Jul 19, 2023Jul 19, 20233 years agoHacking23K
Disclosed Jul 29, 2020Jul 29, 20206 years agoLost or stolen device14K
Disclosed Oct 1, 2018Oct 1, 20187 years agoUnknown
Disclosed May 17, 2017May 17, 20179 years ago19K
Disclosed Jun 3, 2015Jun 3, 201511 years agoHacking2,345
Disclosed Dec 7, 2011Dec 7, 201114 years ago2,900
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Rite Aid, 2011-12-07 · added
  • 2026-09-25 · Rite Aid, 2015-06-03 · data_types: ["names","payment-card","emails","phone","addresses","health"]
  • 2026-09-25 · Rite Aid, 2015-06-03 · records_basis: hhs
  • 2026-09-25 · Rite Aid, 2015-06-03 · records: 2345
  • 2026-09-25 · Rite Aid, 2015-06-03 · disclosed: 2015-06-03
  • 2026-09-25 · Rite Aid, 2015-06-03 · summary: On April 27, 2015, rioters in Baltimore, MD broke into, vandalized, and looted eight locations of the covered entity (CE), Rite Aid, taking 2,345 filled prescriptions. The “will-call” prescriptions involved in the breach contained patients’
  • 2026-09-25 · Rite Aid, 2020-07-29 · added
  • 2026-09-25 · Rite Aid, 2023-07-19 · data_types: ["names","health"]
  • 2026-09-25 · Rite Aid, 2023-07-19 · records_basis: hhs
  • 2026-09-25 · Rite Aid, 2023-07-19 · records: 23433
  • 2026-09-25 · Rite Aid, 2023-07-19 · summary: The covered entity (CE), Rite Aid Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 23,433 individuals. The PHI involved included names, dates of birth, addresses, medication
  • 2026-09-25 · Rite Aid, 2015-06-03 · data_types: ["names","payment-card","emails","phone","addresses"]
  • 2026-09-25 · Rite Aid, 2015-06-03 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2015.pdf
  • 2026-09-25 · Rite Aid, 2015-06-03 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2016.pdf
  • 2026-09-25 · Rite Aid, 2017-05-17 · added
  • 2026-09-25 · Rite Aid, 2024-07-15 · source: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Reportdec-2024.pdf
  • 2026-09-25 · Rite Aid, 2024-07-15 · source: https://ago.vermont.gov/document/2024-07-15-rite-aid-data-breach-notice-consumers
  • 2026-09-25 · Rite Aid, 2024-07-15 · sector: retail
  • 2026-09-25 · Rite Aid, 2024-07-15 · data_types: ["names","addresses","dob","government-id"]
  • 2026-09-25 · Rite Aid, 2024-07-15 · summary: Rite Aid said an unknown party impersonated an employee on June 6, 2024 to compromise business credentials and access systems. The attacker acquired names, addresses, dates of birth and driver's license or ID numbers tied to certain retail
  • 2026-09-25 · Rite Aid, 2024-07-15 · title: Impersonation attack exposes Rite Aid customer ID data from 2017 to 2018 purchases
  • 2026-09-25 · Rite Aid · domain: riteaid.com
  • 2026-09-25 · Rite Aid, 2024-07-15 · data_types: ["names"]
  • 2026-09-25 · Rite Aid, 2024-07-15 · records_basis: organization
  • 2026-09-25 · Rite Aid, 2024-07-15 · records: 2200000
  • 2026-09-25 · Rite Aid, 2015-06-03 · sector: health
  • 2026-09-25 · Rite Aid, 2015-06-03 · attack: hacking
  • 2026-09-25 · Rite Aid, 2015-06-03 · occurred: 2014-08-20
  • 2026-09-25 · Rite Aid, 2023-07-19 · sector: health
  • 2026-09-25 · Rite Aid, 2023-07-19 · attack: hacking

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.