Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesRite Aid said a June 6, 2024 cyberattack exposed information tied to purchases or attempted purchases made between June 6, 2017, and July 30, 2018. The company reported 2.2 million affected people and said the exposed categories could include names, addresses, dates of birth, and driver’s-license or other government-identification numbers. Rite Aid also said Social Security numbers, financial information and patient information were not affected. RansomHub claimed responsibility and threatened to publish data, but the available evidence does not independently confirm the group’s claimed data volume, responsibility or whether a public leak ultimately occurred.
What happened at Rite Aid?
According to Rite Aid’s filing with the Maine attorney general, an external hacking incident occurred on June 6, 2024. Rite Aid said an attacker impersonated an employee to obtain credentials, detected unauthorized access within about 12 hours and terminated that access. The filing lists June 20, 2024, as the date the breach was discovered and July 15, 2024, as the start of consumer notification.
Rite Aid’s filing classifies the event as an external system breach. Contemporaneous reporting says RansomHub, a ransomware group, claimed the attack and threatened to release stolen information. The confirmed company facts establish unauthorized access and exposed records; they do not establish that RansomHub encrypted Rite Aid systems or that the group’s attribution is independently proven. (Maine attorney general filing; SecurityWeek report)
How many people were affected?
Rite Aid reported 2,200,000 affected people nationwide, including 30,137 Maine residents. That is a count of people, not the number of transactions, files, prescriptions or individual data fields. Former customers can be included because the records under investigation are several years older than the 2024 intrusion.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- 【RFID Protection】This women's RFID-blocking wallet features advanced technology to protect your personal information from electronic theft, keeping you safe while traveling or on the go
- 【Compact Design】This slim women's wallet is perfect for those who prefer minimalist designs. Its compact size lets you carry all your essentials without bulk, making it ideal for everyday use
- 【Spacious Capacity】With room for 9–11 cards, this wallet holds all your essential credit cards and IDs while staying slim. The inner pockets also provide extra storage for cash and additional cards
- 【Quality Craftsmanship】Made from premium leather and aircraft-grade aluminum, this women's wallet combines durability with elegance. Its carefully crafted design ensures both style and long-lasting use, making it a reliable everyday accessory
- 【Perfect Gift Choice】Whether for birthdays, graduations, valentine’s day, anniversaries, or other special occasions, this leather women’s wallet comes elegantly packaged—a thoughtful gift for wife, girlfriend, mother, daughters or loved ones who appreciate quality and style.
Why the dates are easy to misunderstand
The attack date and the record date are different. The unauthorized access occurred in 2024, while the potentially accessed purchase-related records span June 6, 2017, through July 30, 2018. Someone who used Rite Aid during that historical window may receive a notice even if they had no recent activity. Conversely, a person who used Rite Aid only after July 30, 2018, is not within the transaction period described publicly, although the individual notification is the controlling source for that person.
What information was exposed?
Rite Aid said the affected records were associated with purchases or attempted purchases and could contain:
Rank #2
- SECURE YOUR WALLET FROM e-PICKPOCKETING: Prevent potential identity and financial theft through your contactless cards. Don’t become a victim e-theft in our growing contactless society. This is the simplest and most effective prevention solution! Block all RFID and NFC signal to secure your details and have peace of mind.
- JAMMING CHIP: An antenna and jamming chip makes up the main components of the card. The antenna will sense incoming radio waves and draw power for the chip to create a jamming signal. Lifetime usage as the card does not require battery.
- BROAD WORKING DISTANCE: A large working distance of 2.4” provides complete protection for your whole wallet. Cards 1.2” either side of the card will be fully secure from e-pickpocketing.
- ULTRA-THIN & COMPACT: At the size of a standard credit card and at only 0.03” thick, the card will fit into any wallet, purse or card case. Keep your wallet compact with no added bulk from this card. Best for travel, business, and everyday use.
- TEST THE CARD: Test the card is working at your local supermarket. At the self-service checkout machines, combine the card and a contactless card on the payment reader. Payment with the contactless card will be blocked and an error message should occur on the reader.
- Name
- Address
- Date of birth
- A driver’s-license number or another government-issued identification number presented during a transaction
The wording does not mean every affected person had every listed field exposed. It also does not establish that a physical license, photograph, barcode or complete identity document was stolen.
What Rite Aid said was not affected
Rite Aid stated that Social Security numbers, financial information and patient information were not affected. “Purchase information” and “patient information” are not interchangeable: a transaction record can show that a person bought or attempted to buy a product without being a medical record or prescription record. Rite Aid’s statement should not be expanded into a claim that no health-related information of any kind existed anywhere in the compromised environment.
Rank #3
- Slim and Thin Wallet - This minimalist bifold wallet measures 4.3x3.2x0.6 inches and stores up to 15 cards. The bifold wallet perfectly fits in your pocket and is well-suited for everyday carry
- Elite Features - 2 ID windows (DL & Other ID Cards) and 2 quick slots allow for quick access during travel, shopping or work. With 15 card slots and 2 more slots behind them, it is easy to carry all your important cards,cash and bills, meet all your daily needs
- RFID Blocking- Our wallets are equipped with advanced RFID SECURE Technology, a unique metal composite, engineered specifically to block 13.56 MHz or higher RFID signals and protect the valuable information stored on RFID chips from unauthorized scans.License and ID cards will be protected effectively. No more worrying about unauthorized scans during travel, shopping, or daily commuting!
- Durable Surface - Our leather wallets are pressed with high quality 3 layers leather, which is more durable than 2 layers leather wallets. The surface of the leather is made more scratch-resistant by special treatment, which can effectively prevent small scratches caused by keys and buttons in life
- Gifts for him - The thin wallet comes in classy gift packaging. It is a perfect present for birthdays, anniversaries, Father's Day, Valentine's Day, Christmas and other special occasions, so you can easily gift it to someone you love
Did RansomHub actually leak the data?
SecurityWeek reported that RansomHub listed Rite Aid on its leak site, claimed to have stolen about 10 GB of customer information and roughly 45 million lines of data, and threatened publication unless a ransom was paid. Those figures and the group’s responsibility remain attacker claims in the available reporting.
| Confirmed or officially reported | Not independently established here |
|---|---|
| 2.2 million people affected | Whether RansomHub obtained all of the data it claimed |
| June 6, 2024, unauthorized access | Whether RansomHub itself conducted the intrusion |
| 2017–2018 purchase-related records in scope | Whether Rite Aid paid or rejected a ransom |
| Names, addresses, dates of birth and identification numbers among reported categories | Whether the data was ultimately published |
| Rite Aid said Social Security, financial and patient information were not affected | Whether the alleged 10 GB or 45 million lines were accurate |
Do not treat “45 million lines” as 45 million victims. It is a separate, unverified description from the alleged attacker.
Rank #4
- RFID Blocking Technology: This credit card holder is made of aluminum shells and ABS plastic, designed with RFID-blocking technology to help protect your credit, ID, debit, and driver's license cards from unauthorized scanning
- Slim Compact: Slim and compact design measures 4.3 x 3 x 0.86 inches, ideal for front pockets or purses
- Card Organizer: With 7 accordion-style slots, this wallet can hold up to 10 standard credit cards or over 20 business cards
- Artistic Expression: Features a variety of artistic designs on the aluminum shell, inspired by famous paintings, flowers, and animals, to complement your personal style
- Thoughtful Gift Idea: Makes a thoughtful gift for any occasion, combining functionality and style
Who may be at risk?
The relevant population is people whose information appeared in Rite Aid purchase or attempted-purchase records during the disclosed 2017–2018 period. The exposure of an identification number can increase the risk of impersonation and convincing phishing, but it does not mean fraud is inevitable or that a bank account, prescription record or new driver’s license can automatically be obtained.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What assistance did Rite Aid offer?
The Maine filing says Rite Aid offered affected individuals 12 months of Kroll credit monitoring, fraud consultation and identity-theft restoration. That was part of the 2024 notification. Enrollment deadlines and availability may have expired, so use the contact information in an authentic Rite Aid notice and confirm the deadline rather than assuming a current benefit. Kroll’s corporate site is kroll.com; do not enter personal information through an unsolicited link.
Recommended Free Tools
Best Value
- GENUINE LEATHER: Precious Genuine Vegetable Tanned Cowhide Leather with nice and smooth texture, really soft & comfortable to touch. Vegetable tanned Leather is a luxury leather. It uses natural ingredients instead of chemicals, so it is environmentally friendly.
- ELITE FEATURES: 2 ID windows (DL & Other ID Cards) allow for quick access when traveling or at the store /working place. With 8 card slots and 2 more slots behind them, it’s easy to carry all your important cards, meet all your daily needs.
- RFID BLOCKING SECURITY: Our wallets are equipped with advanced RFID SECURE Technology, a unique metal composite, engineered specifically to block 13.56 MHz or higher RFID signals and protect the valuable information stored on RFID chips from unauthorized scans.
- COMPACT DESIGN: Making this bifold superb for travel, and everyday use, keeping cards safe and organized! It holds 10+ cards, and lots of cash!
- GIFT BOX PACKING: It is one of the most special gifts for Groomsmen, Birthdays, Anniversaries, Father's Day, Christmas and other Special Occasions.
What affected consumers should do now
- Verify the notice. Check the letter or an official Rite Aid communication for the affected data categories, service provider and enrollment deadline. Avoid links in unexpected emails or text messages.
- Use the offered monitoring if it is still available. Confirm that the provider is Kroll and that the enrollment route comes from the notice or an official company channel.
- Consider a credit freeze. A freeze at each major credit bureau can block many new-credit applications made with stolen identity data. It must be managed separately with each bureau and can temporarily delay a legitimate application; monitoring alone does not prevent all fraud.
- Review credit reports and statements. Look for unfamiliar accounts, inquiries, address changes and identity-verification attempts. Rite Aid’s statement that financial information was not affected does not eliminate the possibility of later impersonation using exposed identity details.
- Ask your motor-vehicle agency about options. State procedures differ. Ask whether a license number can be replaced or flagged and whether the agency requires evidence of misuse; do not assume automatic replacement is necessary or available solely because of this breach.
- Expect targeted scams. A caller who knows your name, address, birth date or a Rite Aid purchase may sound credible. Never provide passwords, one-time codes, payment details or identification images in response to an unsolicited request.
- Document and report suspicious activity. Keep letters, emails, call details and transaction records. Contact the relevant financial institution, credit bureau, state agency, law-enforcement office or federal identity-theft reporting service when appropriate.
Timeline
- June 6, 2024: Rite Aid’s reported intrusion date.
- June 20, 2024: Discovery date recorded in the Maine filing.
- Early July 2024: Reports described RansomHub’s leak-site listing and threat.
- July 15, 2024: Consumer-notification date recorded by Maine.
- July 17, 2024: Contemporaneous coverage reported the 2.2 million affected-person figure.
What remains unknown
The available sources do not verify whether RansomHub carried out the intrusion, whether Rite Aid paid a ransom, whether the group’s claimed volume was genuine or whether the threatened data was later published. Treat the incident as a continuing identity-theft and phishing risk, not proof that every affected person will experience fraud. For the official filing and its reported figures, see the Maine attorney general record.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
