CVS Pharmacy Details

    Organization Logo

    CVS Pharmacy

    Woonsocket, Rhode Island employees • Healthcare

    Industry

    Healthcare

    Security Incidents

    1

    CVS Pharmacy, Inc. is an American retail corporation. A subsidiary of CVS Health, it is headquartered in Woonsocket, Rhode Island. Originally named the Consumer Value Stores, it was founded in Lowell, Massachusetts in 1963.

    Security Incidents

    CVS Pharmacy Breach of Jul 2021
    Severity Score
    Low to Moderate

    Type

    Data Breach

    Summary

    In July 2021, CVS Pharmacy experienced a data breach involving an unsecured, non-password-protected database that was publicly accessible on the internet. The breach exposed over one billion records, including email addresses, user IDs, and search queries related to medications and COVID-19 vaccines. The database was discovered by security researchers from Website Planet, who promptly notified CVS of the vulnerability. CVS confirmed that the exposed data did not include any personal health information (PHI) or financial details, and they quickly secured the database upon notification. The inci...
    Show more

    Severity

    The breach was severe as more than 1 billion search records belonging to CVS Health were accidentally posted online and accessible to the public earlier this year. The database containing a large quantity of search queries entered into CVS.com and CVSHealth.com websites was exposed, indicating a significant data leak.

    Impact

    The breach impacted the privacy and security of over 1 billion CVS Health users whose search records were exposed online. Users' search queries for medications, COVID-19 vaccines, and other personal health-related items were visible, raising concerns about the confidentiality of their health information.