Rite Aid Reports Data Breach

Rite Aid is informing customers of a data breach that occurred on June 6 that allowed the hacker to acquire data including names, addresses, and additional information contained on government identification of shoppers.

According to the drug store chain, an unknown third party impersonated a company employee to compromise their business credentials and gain access to certain business systems. Rite Aid said the breach was detected within 12 hours and the company immediately launched an investigation to terminate the unauthorized access, remediate affected systems, and ascertain if any customer data was impacted. The incident was also reported to law enforcement, as well as federal and state regulators.

Rite Aid has also determined the unknown third party acquired certain data associated with the purchase or attempted purchase of specific retail products. This data included the purchaser's name, address, date of birth, and driver’s license number or other form of government-issued ID presented at the time of purchase between June 6, 2017, and July 30, 2018. To confirm, no social security numbers, financial information, or patient information was impacted by the incident.