Summary:
-
Breach Details: Rite Aid reported a ransomware attack compromising the personal data of 2.2 million customers, including names, addresses, dates of birth, and government-issued ID numbers from transactions between June 2017 and July 2018.
-
Incident Overview: On June 6, 2024, an attacker impersonated a company employee, gaining access to business systems. Rite Aid detected the breach within 12 hours, initiated an internal investigation, and remediated affected systems.
-
RansomHub Involvement: The ransomware group RansomHub, formerly known as Knight, claimed responsibility for the attack, stating it obtained over 10GB of customer data. Negotiations with Rite Aid were ongoing when the company ceased communication.
!