Rite Aid Provides Notice of Security Incident

Rhea-AI Summary

Rite Aid (OTC: RADCQ) has reported a security incident involving unauthorized access to certain business systems. On June 6, 2024, an unknown third party impersonated an employee and gained access to customer data. The compromised information includes names, addresses, dates of birth, and government-issued ID numbers for purchases made between June 6, 2017, and July 30, 2018.

Rite Aid detected the breach within 12 hours and immediately launched an investigation. The company has confirmed that no social security numbers, financial information, or patient data were affected. Rite Aid is implementing additional security measures and has set up a dedicated assistance line for affected consumers, which will remain open until October 15, 2024.

Positive

• Quick detection and response to the security breach within 12 hours
• No social security numbers, financial information, or patient data were compromised
• Implementing additional security measures to prevent future attacks

Negative

• Unauthorized access to customer personal information, including names, addresses, and government-issued ID numbers
• Data breach affects purchases made over a one-year period from 2017 to 2018
• Potential reputational damage and loss of customer trust due to the security incident

PHILADELPHIA--(BUSINESS WIRE)-- Rite Aid Corporation (OTC: RADCQ) is providing notice of an incident that involved certain consumers’ personal information. We are mailing letters to any potentially affected consumer who was associated with a mailing address in our systems.

On June 6, 2024, an unknown third party impersonated a company employee to compromise their business credentials and gain access to certain business systems. We detected the incident within 12 hours and immediately launched an investigation to terminate the unauthorized access, remediate affected systems and ascertain if any customer data was impacted. We also reported the incident to law enforcement, as well as federal and state regulators.

We determined by June 17, 2024, that the unknown third party acquired certain data associated with the purchase or attempted purchase of specific retail products. This data included purchaser name, address, date of birth and driver’s license number or other form of government-issued ID presented at the time of a purchase between June 6, 2017, and July 30, 2018. To confirm, no social security numbers, financial information or patient information was impacted by the incident.

We regret that this incident occurred and are implementing additional security measures to prevent potentially similar attacks in the future. We take our obligation to safeguard personal information very seriously and are alerting affected consumers about this incident.

We are committed to protecting consumers’ information, and anyone with additional questions may call our dedicated assistance line toll-free at (866) 810-8094 from 8 a.m. to 5:30 p.m. Central Time, Monday – Friday, excluding holidays. This line will remain open until October 15, 2024. If you are a Rite Aid consumer who did not receive a letter regarding this incident, but you would like to know if you were affected, please call our dedicated assistance line.

View source version on businesswire.com: https://www.businesswire.com/news/home/20240715930646/en/

Please direct media inquiries to press@riteaid.com.

Source: Rite Aid Corporation

FAQ

What type of customer data was compromised in the Rite Aid (RADCQ) security breach on June 6, 2024?

The compromised data included customer names, addresses, dates of birth, and driver's license numbers or other government-issued ID numbers for purchases made between June 6, 2017, and July 30, 2018.

How long will Rite Aid's (RADCQ) dedicated assistance line for the June 2024 security incident be available?

Rite Aid's dedicated assistance line for the security incident will remain open until October 15, 2024. Consumers can call toll-free at (866) 810-8094 from 8 a.m. to 5:30 p.m. Central Time, Monday – Friday, excluding holidays.

Were social security numbers or financial information affected in the Rite Aid (RADCQ) data breach announced in July 2024?

No, Rite Aid confirmed that no social security numbers, financial information, or patient information were impacted by the security incident announced in July 2024.

How quickly did Rite Aid (RADCQ) detect and respond to the June 2024 security breach?

Rite Aid detected the security breach within 12 hours of the initial unauthorized access on June 6, 2024, and immediately launched an investigation to terminate the access and remediate affected systems.