Rite Aid Corporation reached a $6.8 million settlement to resolve a consolidated class action lawsuit, Bianucci, et al. v. Rite Aid Corp., following a massive 2024 data breach. The breach, which occurred on June 6, 2024, involved a cybercriminal impersonating a company employee to gain access to Rite Aid's business systems, compromising the personal information of approximately 2.2 million customers. The stolen data specifically impacted customers who made purchases between June 6, 2017, and July 30, 2018, and included highly sensitive details such as full names, addresses, dates of birth, and driver’s license or other government-issued ID numbers.
Who Was Eligible for the Rite Aid Settlement?
The settlement was designed to provide restitution to all individuals nationwide whose data was exposed during the June 2024 security incident.
- Affected Class: Any natural person residing in the United States whose personal identifiable information (PII) was accessed or potentially accessed in the breach.
- Purchase Requirement: Specifically, individuals who purchased or attempted to purchase products at certain Rite Aid locations between June 6, 2017, and July 30, 2018.
- Notification: Class members typically included those who received a formal data breach notification letter from Rite Aid in July 2024.
Final Compensation Tiers and Awards
The $6.8 million fund was established to exhaust all valid claims, including legal fees and administrative costs.
- Documented Loss Reimbursement: Class members were eligible to claim up to $10,000 for unreimbursed, out-of-pocket expenses directly traceable to the breach, such as identity theft recovery costs or professional service fees.
- Alternative Cash Payment: Individuals who did not have documented losses could choose a pro rata cash payment, the amount of which was determined by the remaining funds after documented losses and fees were paid.
- Identity Protection: Impacted individuals were also offered 12 months of free credit monitoring and identity theft protection services.
Case Conclusion and Payout Status
The legal proceedings for this case reached finality in mid-2025.
- Claim Deadline: The final deadline to submit a valid claim form was July 7, 2025.
- Final Approval: The U.S. District Court for the Eastern District of Pennsylvania granted final approval of the $6.8 million settlement on July 30, 2025.
- Payment Distribution: Following final approval, the settlement administrator began processing valid claims, with payments expected to be issued to approved class members in late 2025 or early 2026.
