Rite Aid has revealed that on May 17 a number of prescription records from Rite Aid Store No. 2255 located at 520 North State Route 2 in New Martinsville, were found in a non-Rite Aid location and returned to them.
Rite Aid Spokesperson Ashley Flower said the company did not previously know they were missing. Immediate action was taken to resecure these records and a subsequent review of the pharmacy files at the store began to determine if any additional records were missing. During the review, it was determined that some prescription records were missing. "An exhaustive search was made for these files before it was determined that the files could not be located," said a media release.
"It is important to note that the involved prescription records from Rite Aid Store No. 2255 would not have contained any credit card numbers or social security numbers," continued the release. "There is no evidence to support that any customer information has been misused."
Prescription records from Rite Aid Store No. 2255 located at 520 North State Route 2 in New Martinsville, were found at a non-Rite Aid location. However they determined some records are still missing.
As a precaution, the company has engaged the world's leading risk consulting company Kroll Inc., to alert impacted customers via a letter of notification and share with them the proactive measures it has taken to guard against identity theft. Customers who did not receive a notification letter were likely not affected. No files from any other Rite Aid store were involved.
Flower said they do not anticipate any prosecution to come from the incident and she would not comment on where the records were found or if there were any personnel issues surrounding the incident.
Rite Aid customers with questions and concerns around this incident can contact Kroll Inc., at 1-877-451-9363 or Rite Aid at 1-800-RITE-AID.
Media notification of the incident is required by the Federal Health Information Technology for Economic and Clinical Health ("HITECH") Act and corresponding regulations promulgated by the U.S. Department of Health and Human Services.
Rite Aid says patient privacy is a top priority for Rite Aid and there are strict protocols to secure records while they reside in their stores as well as when they are destroyed. Rite Aid deeply regrets that this incident occurred and apologizes for any inconvenience this may have caused its customers.