Rite Aid Corporation Posts Notice of Data Breach Affecting Customers’ Protected Health Information

From Rite Aid:

“Rite Aid Corporation is providing notice of an incident that involved certain consumers’ personal information. Letters were mailed on July 20, 2023, to any potentially affected consumer who was associated with a mailing address in our systems.

On May 31, 2023, we were informed by a vendor partner of ours that there was a vulnerability in their software, and it had been exploited by an unknown third party. To address the defect, the vendor provided a software update. We immediately installed the software update and conducted a thorough review of our systems and the provider’s software, during which we discovered that on May 27, 2023, certain company files had been accessed by the unknown party. Information contained in some of these files included a limited amount of protected health information such as: patient first and last names, dates of birth, addresses, prescription information including medication names and dates of fill, prescriber information, and in some instances limited insurance information (plan name and cardholder ID). Note that no social security numbers or financial information such as credit card numbers were involved in the incident.

We regret that this incident occurred. We immediately reported it to law enforcement as well as appropriate federal and state regulators. We take our obligation to safeguard personal information very seriously and are alerting consumers about this issue in case they would like to take any steps to help protect themself. Consumers are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer-reporting agencies. To order your free credit report, visit www.annualcreditreport.com. 

We are committed to protecting consumers’ information, and anyone with additional questions may call our dedicated assistance line at 866-373-9172 (toll-free), Monday – Friday, 8:00 a.m. to 5:30 p.m. Central Time, excluding holidays. This line will remain open until October 19, 2023. If you are a Rite Aid consumer who did not receive a letter regarding this incident, but you would like to know if you were affected, please call our dedicated assistance line.”