Rite Aid Data Breach Exposes 2.2 Million Customers' Personal Information
Hackers accessed customer details from 2017-2018 using stolen employee credentials, prompting a major security overhaul.
- RansomHub ransomware gang claims responsibility for the breach, demanding a ransom from Rite Aid.
- Compromised data includes names, addresses, dates of birth, and government-issued ID numbers.
- Rite Aid detected the breach within 12 hours but took 11 days to assess the extent of the damage.
- No Social Security numbers, financial, or health care data were exposed in the incident.
- Rite Aid is offering affected customers 12 months of credit monitoring and has reported the breach to authorities.