Data Compromised After Looting, Walgreens Warns Customers

DEERFIELD, IL — Walgreens Boots Alliance is informing some customers that their information may have been compromised during break-ins of stores between May 26 and June 5 across the United States. Incidents of looting at a number of businesses nationwide immediately followed the death of George Floyd in Minnesota at the end of May.

Walgreens Boots Alliance, based in Deerfield, is the parent company of Walgreens.

According to the letter, various groups of individuals broke into multiple Walgreens stores and forced entry into the secured pharmacy at select locations. Among the many items stolen were those containing health-related information such as filled prescriptions waiting for customer pickup and paper records.

"We would like to assure you that our investigation has determined that your credit/debit card number, banking information, and Social Security Number were not compromised," Walgreens said in the letter.

The information that may have been involved includes one or more of the following data elements:

• First and last name
• Address
• Phone number
• Date of birth and/or age
• Clinical information such as medication name, strength, quantity, and description
• Prescription number
• Prescriber name
• Health plan name and group number
• Vaccination information including eligibility information
• Email Address
• Balance Rewards Number
• Photo ID Number - Driver’s License, state ID, military ID, or passport (e.g. for purchases such as pseudoephedrine)

Walgreens CEO Stepping Down

According to the letter, Walgreens states it "promptly" took steps to close out and re-enter impacted prescriptions in its system to prevent potential fraud regarding the original prescription. Insurance claims were also reversed for any stolen filled prescriptions that had already been billed to health plans.

The notification letter, dated July 24, was posted on the California attorney general's website. California law requires companies to report data breaches affecting state residents.

Walgreens said it is coordinating with local law enforcement where appropriate.

The company is advising customers to monitor their prescription and medical records. It is also recommending customers do the following:

• Review their "explanation of benefits statement" which they get from their health insurance company. Follow up with their insurance company or the care provider for any items they don't recognize.
• Ask their insurance company for a current year-to-date report of all services paid for them as a beneficiary. Follow-up with their insurance company or care provider for any items they don't recognize.

Walgreens also provided compromised customers with information on how to obtain free credit reports to monitor any suspicious activity that may have occurred as a result of the break-ins.

Related:
Walgreens Lost $1.7 Billion Amid Coronavirus Pandemic
Walgreens To Open Doctors' Offices In 500-700 Stores