DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Millville ShopRite experiences data security incident

Posted on February 27, 2018 by Dissent

Maxwell Reil reports:

A ShopRite pharmacy in Millville experienced a data security incident involving the loss of personal and medical information, according to Wakefern Food Corp., the cooperative that supplies goods and support services to ShopRite stores and pharmacies.

According to a news release, a device used in the pharmacy to capture customer signatures was inadvertently disposed of in June. Customers who purchased prescriptions at the location between 2007 and 2013 signed the device to confirm acknowledgement of the store’s privacy policy and payment by their insurance provider. Customers who purchased over-the-counter products containing pseudoephedrine, such as cold or nasal medications, also had personal information on the device.

Read more on Press of Atlantic City.  Wakefern’s notice reads:

A Message to Our Customers

On January 11, 2018, Union Lake Supermarket, LLC, confirmed that the pharmacy located in the ShopRite of Millville, NJ experienced a data security incident involving the loss of personal and medical information. A device used in the pharmacy to capture customer signatures was inadvertently disposed of in June 2016.

Customers who had prescriptions filled at the pharmacy located in the ShopRite of Millville, NJ between 2007 and 2013 signed this device to confirm acknowledgement of the store’s privacy policy and payment by their insurance provider (if applicable). The personal and medical information included name, phone number, date of birth, prescription number, medication name, date and time of pick-up or delivery, signature, and zip code.

In addition, customers who purchased an over-the-counter product containing pseudoephedrine (“PSE”), such as certain cold or nasal medications, at the pharmacy located in ShopRite of Millville, NJ between 2007 and 2013 had personal and medical information stored on this device in order to meet legal requirements regarding PSE sales. The personal and medical information included name, driver’s license number, zip code, and product purchased.

These pharmacy customers and the customers who purchased an over-the-counter product containing PSE have been notified directly by ShopRite via U.S. Mail.

It is important to note that Social Security numbers and debit and credit card information were not stored on this device.

We have no evidence that any of the personal or medical information from the device has been accessed or misused in any way, but ShopRite is alerting certain customers who shopped at the pharmacy located in the ShopRite of Millville, NJ so that they may take any necessary precautions to safeguard their information.

We have provided a list of recommended steps for preventing identity theft and fraud on this website. We recommend that customers regularly review the explanation of benefits statements that they receive from their health plan. If they see any service that they did not receive, contact the health plan at the number on the statement. Additionally, we suggest that customers monitor their financial accounts and, if they see any unauthorized activity, promptly contact their financial institution.

The ShopRite store is taking steps to prevent recurrence of similar incidents, including providing supplemental privacy and security training for pharmacy staff and strengthening security policies relating to the appropriate removal of data from, and disposal of, computers and devices. We sincerely regret any inconvenience or concern caused by this incident.

Please see our FAQs and Resources pages for additional information or call us at 1-800-954-5210.


Related:

  • TX: Kaufman County Faces Cybersecurity Attack: Courthouse Computer Operations Disrupted
  • Attorney General James Announces Settlement with Wojeski & Company Accounting Firm
  • JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
  • Before Their Telegram Channel Was Banned Again, ScatteredLAPSUS$Hunters Dropped Files Doxing Government Employees (2)
  • Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident
  • Data BreachesProsper Data Breach Impacts 17.6 Million Accounts
Category: ExposureHealth DataU.S.

Post navigation

← Arkansas Man Sentenced to Prison for Developing and Distributing Prolific Malware
Bathurst pharmacist to pay $17,000 for texting private information about a patient →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.