For the past 249 years, the United States of America has celebrated its independent nationhood. As if today’s celebrations aren’t big enough, a little birdy told us that a new data breach class action settlement has been confirmed. That means some eligible people may now claim $10,000! From parades to fireworks and from the smell of freshly baked pies to the sounds of money being paid into your account. What a time to be alive!
The data breach that led to a class action lawsuit
The retail pharmacy chain Rite Aid was established in 1962, with its headquarters in Pennsylvania. Many customers have bought their prescriptions, over-the-counter drugs, health and wellness products, and general goods from the chain over the years. Unfortunately, the chain filed for bankruptcy in 2023, resulting in the closure of over 700 stores. If that wasn’t bad enough, Rite Aid became the victim of a cyberattack.
On June 6, 2024, the RansomHub ransomware group gained access to the pharmacy chain’s systems. According to Rite Aid, the unauthorized log-in was halted within 12 hours, but it was too little, too late. RansomHub breached the personal data of 2.2 million customers who made purchases between June 6, 2017, and July 30, 2017. The breached data included names, driver’s licenses, addresses, and birth dates, but according to Rite Aid:
“no Social Security numbers, financial information or patient information was impacted by the incident.”
A class action lawsuit followed, as plaintiffs argued that the defendant could have prevented the 2024 data breach if they had the appropriate cybersecurity measures in place. Rite Aid denied all wrongdoing, but agreed to a $6.8 million settlement to resolve the allegations. The pharmacy chain also agreed to enact improved cybersecurity measures.
These citizens will be eligible for the claim
Class action lawsuit settlements such as this one renew the belief in the justice system, no matter how small the compensation. Of course, only certain citizens will be eligible to claim from this settlement, and certain criteria will determine eligibility.
Criteria to claim from this settlement
- Your data was breached in the Rite Aid data breach on June 6, 2024
- You received a notice of the data breach from Rite Aid
- You have documented proof of losses
- You filed a valid claim form before the deadline
If you meet all of the above, you are officially deemed a class member of this settlement. If you were affected by the data breach, but did not receive an official notice, contact the Settlement Administrator at 833-421-7672. The settlement will fund class members, attorney’s charges, administrative fees, and class representatives’ monetary awards. Class members could be eligible for $10,000 and more.
You could be eligible for $10,000 and more
Besides monetary compensation, Rite Aid has promised all notified class members free credit monitoring and identity theft protection services for one calendar year. Now, the amount of compensation you can claim will depend on your proof of expenses or incurred losses related to the data breach.
Documented losses
You could claim up to $10,000 if you have proof of:
- Bank account statements with unauthorized charges
- Receipts for credit monitoring services bought after the June 6, 2024, data breach
- Receipts for professional charges related to identity theft
- Other relevant documentation proving your expenses
Should you not have documented proof of expenses or incurred losses, you may still claim a flat cash payment. The cash amount will vary depending on the number of valid claims, as well as the remaining settlement fund after documented losses have been settled.
The final approval hearing has been scheduled for July 17, 2025, and payouts typically occur within 30 days of the final approval hearing. Other settlements could be of interest to you as well. For more information about this settlement, you can visit Top Class Actions and get informed about how to file a claim.
Disclaimer: You should not submit false or inflated claims under penalty of perjury, as class‑action claim forms historically required declarations signed “under penalty of perjury” to ensure authenticity. Submitting a fraudulent claim not only carries legal exposure—including potential civil and criminal sanctions—but also harms other eligible class members by diluting the available settlement pool.
Read the whole thing?
Get the week's signal, not the noise
Our sharpest reporting on energy, climate and nature — free, once a week.
