PHILADELPHIA — Amid bankruptcy proceedings and the closure of hundreds of stores across the country, Rite Aid Corporation said Monday some customers' personal data was compromised.
The data breach happened on June 6 when an unknown third party impersonated an employee to get login credentials. That allowed this third party to gain access to some of Rite Aid's business systems.
Law enforcement, as well as state and federal regulators, were also looped in to the breach, Rite Aid said.
The company said they detected the breach within 12 hours and launched an investigation to stop the unauthorized access and make sure it couldn't happen again.
About two weeks after first learning about the breach, the company said it learned the third party accessed data associated with the purchase or attempted purchase of specific retail products.
This data included some purchasers' name, address, birth date and driver's license number or other form of government-issued ID that were shared at the time of purchase between June 6, 2017, and July 30, 2018.
Rite Aid said no social security numbers, financial information or patient information was compromised.
"We regret that this incident occurred and are implementing additional security measures to prevent potentially similar attacks in the future. We take our obligation to safeguard personal information very seriously and are alerting affected consumers about this incident," Rite Aid Corporation said in a news release.
It was not immediately clear how many people were affected by the breach, but the chain did say they were mailing letters to those impacted.
Rite Aid set up a toll-free assistance line for customers to call for questions at 866-810-8094. The line is open from 8 a.m. to 5:30 p.m. Central Time Monday through Friday and will remain open until Oct. 15.
If you're a Rite Aid customer who didn't get a letter about this breach and want to know if you're impacted, you can call the dedicated assistance line.
