Rite Aid, the third biggest US drug store chain, said that more than 2.2 million of its customers have been swept into a data breach that stole personal information, including driver's license numbers, addresses, and dates of birth.
The data provided included the purchaser's name, address, date of birth, and driver's license number or other form of government-issued ID.
“We detected the incident within 12 hours and immediately launched an internal investigation to terminate the unauthorized access, remediate affected systems and ascertain if any customer data was impacted.”
On its dark web site, RansomHub said it was in advanced stages of negotiation with Rite Aid officials when the company suddenly cut off communications.
Rite Aid has also declined to say if the employee account compromised in the breach was protected by multifactor authentication.
The chain filed for bankruptcy in October, largely to seek protection from lawsuits surrounding the opioid crisis.
The original article contains 314 words, the summary contains 150 words. Saved 52%. I'm a bot and I'm open source!