Rite Aid Under Investigation for Data Breach of Over 2.2 Million Customer Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the private information of 2.2 customers of Rite Aid Corporation, a Pennsylvania-based pharmacy chain.

On or about July 12, 2024, Rite Aid confirmed that a third party impersonated a company employee, compromised their business credentials, and gained access to certain systems. The third party then gained access to data associated with the purchase of specific retail products.

Although Rite Aid has yet to reveal who was behind the data breach, the RansomHub cybercrime group claimed credit for the breach, saying they stole customer data from the company's systems. RansomHub claims it obtained over 19 gigabytes of customer information, including 45 million lines of their personal information. Rite Aid reportedly refused to pay the ransom.

Rite Aid recently informed customers that the following private information may have been stolen in the breach: names, addresses, dates of birth, and driver’s license numbers or other government-issued IDs presented between June 6, 2017 and July 30, 2018.

If your private information was impacted by this incident, you may be at risk of identity theft, financial fraud, and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Rite Aid’s cybersecurity practices.

If you received notification of this data breach or were a Rite Aid customer between June 6, 2017 and July 30, 2018 and wish to obtain additional information about your legal rights, please complete the form below complete the form below for a free legal consultation.