On July 20, 2023, Rite Aid Corporation posted a Security Incident Notice” after learning that a vulnerability in software used by the company allowed an unauthorized actor to access confidential customer information. In this notice, RiteAid explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their first and last names, dates of birth, addresses, prescription information, medication names and dates of fill, prescriber information, and insurance information. Upon completing its investigation, RiteAid began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you receive a data breach notification from Rite Aid Corporation, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Rite Aid data breach. For more information, please see our recent piece on the topic here.
What Caused the Data Breach Affecting Rite Aid Customers?
The Rite Aid data breach was only recently announced, and more information is expected in the near future. However, RiteAid’s recent “Security Incident Notice'' provides some important information on what led up to the breach. According to this source, on May 31, 2023, Rite Aid was notified by a third-party vendor that there was a vulnerability in their software, and it had been exploited by an unknown third party.
In response, Rite Aid immediately installed a software update that eliminated the vulnerability and then launched an investigation into the incident to determine what, if any, consumer information was leaked as a result of the incident. The Rite Aid investigation confirmed that certain files within the vendor’s software were accessible to an unauthorized party on May 27, 2023. Rite Aid was subsequently able to determine that some of the files that were compromised contained confidential health information related to certain customers.
After learning that sensitive consumer data was accessible to an unauthorized party, Rite Aid reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your first and last name, date of birth, address, prescription information, medication names and dates of fill, prescriber information, and insurance information.
On July 20, 2023, Rite Aid sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of which information of theirs was compromised.
More Information About Rite Aid Corporation
Founded in 1968, Rite Aid Corporation is a drug store chain based out of Camp Hill, Pennsylvania. Rite Aid operates over 2,200 drug stores throughout the United States. The company’s stores also provide photo processing services. Rite Aid is publicly traded on the New York Stock Exchange under the symbol “RAD.” Rite Aid employs more than 53,000 people and generates approximately $24 billion in annual revenue.
