Rite Aid Becomes RansomHub's Latest Victim After Data Breach

Rite Aid disclosed a June security incident in which a third party impersonated an employee to access company systems; the company says no SSNs, financial details, or patient information were affected but that customer data tied to retail purchases (names, addresses, dates of birth, and driver’s license/government ID numbers) was acquired. The ransomware group RansomHub claims it obtained over 10GB of customer information (about 45 million lines) and began posting proof and threatening further leaks after negotiations ended.