Rite Aid customers may soon be eligible to receive payouts from a recent $2 million data breach settlement. This dividend might be up to $10,000, so get excited! On 20 June 2024, cybercriminals affiliated with the ransomware collective RansomHub carried out a cyberattack. They gained access to the personally identifiable information (PII) of approximately 2.2 million customers. The breach has caused a visible outcry. Given Rite Aid’s presence in the healthcare industry at large, it has found itself as a prime target for cybersecurity attacks.
By March 2025, a U.S. District Court granted a $6.8 million settlement tentative approval. This settlement brings together multiple class action lawsuits across the country against Rite Aid. Claimants must be customers whose PII was compromised in the 2018 breach. While Rite Aid has settled the lawsuit, it has accepted no liability for what happened.
Starting in early July 2025, Rite Aid started notifying impacted customers of the breach. They provided 12 months of free credit monitoring and identity theft protection services. Even after these initiatives, critics are still worried about the sufficiency of Rite Aid’s security practices to safeguard sensitive customer data.
The breach included access by RansomHub to customer data without authorization on June 6, 2024. Just this year, the Federal Trade Commission (FTC) reported more than 1.1 million cases of identity theft, highlighting the increasing risks of cybersecurity. While Rite Aid stated that “no Social Security numbers, financial information or patient information was impacted by the incident,” the exposed data still poses risks for those affected.
As part of their ongoing financial struggles, Rite Aid has closed more than 700 locations since filing for bankruptcy and restructuring in October 2023. This lack of fiscal security will surely make it tougher for the company to earn back consumer confidence after the breach.
Their office at P.O. Box 225391, New York, NY 10150-5391 will be in charge of settlement claims process. Current customers wanting to file a claim need to submit one by the July 7, 2025 deadline.