Table of Contents
PHILADELPHIA — Rite Aid Corp. is providing notice of an incident that involved certain consumers’ personal information.
“We are mailing letters to any potentially affected consumer who was associated with a mailing address in their systems.
“On June 6, 2024, an unknown third party impersonated a company employee to compromise their business credentials and gain access to certain business systems. We detected the incident within 12 hours and immediately launched an investigation to terminate the unauthorized access, remediate affected systems and ascertain if any customer data was impacted. We also reported the incident to law enforcement, as well as federal and state regulators.
“We determined by June 17, 2024, that the unknown third party acquired certain data associated with the purchase or attempted purchase of specific retail products. This data included purchaser name, address, date of birth and driver’s license number or other form of government-issued ID presented at the time of a purchase between June 6, 2017, and July 30, 2018. To confirm, no social security numbers, financial information or patient information was impacted by the incident.
“We regret that this incident occurred and are implementing additional security measures to prevent potentially similar attacks in the future. We take our obligation to safeguard personal information very seriously and are alerting affected consumers about this incident.
“We are committed to protecting consumers’ information, and anyone with additional questions may call our dedicated assistance line toll-free at (866) 810-8094 from 8 a.m. to 5:30 p.m. Central Time, Monday – Friday, excluding holidays. This line will remain open until October 15, 2024. If you are a Rite Aid consumer who did not receive a letter regarding this incident, but you would like to know if you were affected, please call our dedicated assistance line,” said the company in a statement.
