In July, we were advised by PNI Digital Media, the third party that manages and hosts mywayphotos.riteaid.com, that PNI was investigating a possible compromise of certain online and mobile photo account customer data. As a precaution, we quickly disabled access to our online and mobile photo services. Since that time, we engaged a third-party expert to conduct an investigation of the issue. Based on the investigation, we learned that there had been unauthorized access to PNI’s systems, which may have resulted in the compromise of some Rite Aid customer data. The data that may have been affected by this issue includes names, addresses, phone numbers, email addresses, and in some cases payment card information (including card numbers, expiration dates and security codes).
There is no indication that any Rite Aid customer passwords, PINs or photos were impacted. We have received no reports of fraud or misuse of Rite Aid customers’ personal information resulting from this issue.
No other online or mobile transactions are affected. This issue is limited to online photo transactions involving PNI. RiteAid.com, Rite Aid Online Store, My Pharmacy, wellness+ with Plenti, in-store systems, in-store photo kiosk printing and photo gift ordering are not affected.
To process your photos at Rite Aid, please visit one of our stores. We will provide notice when we re-launch our online photo website and mobile services.
Rite Aid is directly notifying customers whose payment card information may have been affected by this issue. We take the privacy of customer information very seriously and apologize for any inconvenience this may cause.