CVS Pharmacy Details

CVS Pharmacy

Woonsocket, Rhode Island • employees • Healthcare

Industry

Healthcare

Security Incidents

CVS Pharmacy, Inc. is an American retail corporation. A subsidiary of CVS Health, it is headquartered in Woonsocket, Rhode Island. Originally named the Consumer Value Stores, it was founded in Lowell, Massachusetts in 1963.

Security Incidents

CVS Pharmacy Breach of Jul 2021

Severity Score

Low to Moderate

Type

Data Breach

Summary

In July 2021, CVS Pharmacy experienced a data breach involving an unsecured, non-password-protected database that was publicly accessible on the internet. The breach exposed over one billion records, including email addresses, user IDs, and search queries related to medications and COVID-19 vaccines. The database was discovered by security researchers from Website Planet, who promptly notified CVS of the vulnerability. CVS confirmed that the exposed data did not include any personal health information (PHI) or financial details, and they quickly secured the database upon notification. The inci...
Show more

Severity

The breach was severe as more than 1 billion search records belonging to CVS Health were accidentally posted online and accessible to the public earlier this year. The database containing a large quantity of search queries entered into CVS.com and CVSHealth.com websites was exposed, indicating a significant data leak.

Impact

The breach impacted the privacy and security of over 1 billion CVS Health users whose search records were exposed online. Users' search queries for medications, COVID-19 vaccines, and other personal health-related items were visible, raising concerns about the confidentiality of their health information.