Rite Aid data breach
Was I affected?
Rite Aid confirmed a breach affecting about 2.2 million people, exposing names, addresses, dates of birth and driver's license numbers. You may be affected if you bought (or tried to buy) ID-checked products at Rite Aid between June 6, 2017 and July 30, 2018 and got a Rite Aid letter.
| Announced | Jul 12, 2024 |
|---|---|
| When it happened | June 6, 2024 (data from purchases June 2017 - July 2018) |
| People affected | 2.2 million |
| Data exposed | Names, Addresses, Dates of birth and Driver's license numbers |
| Status | Confirmed by the company or a regulator filing |
What happened
Pharmacy chain Rite Aid said an attacker posing as an employee obtained business credentials on June 6, 2024 and took data tied to purchases or attempted purchases of certain retail products between mid-2017 and mid-2018. About 2.2 million people had names, addresses, birth dates and driver's license or other ID numbers exposed; Rite Aid said no SSNs, financial or patient health data were involved.
What should I do?
- Ask your state DMV about flagging or replacing your driver's license number if you see signs of misuse.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
Check the other services you use →
Sources
- Rite Aid says 2.2 million people affected in data breach · Malwarebytes (news)
- 2.2 million Rite Aid customers were hacked in June data breach · BGR (news)