Rite Aid $6.8M Data Breach Class Action Settlement

Rite Aid Corporation

If your personal information was or potentially compromised in the Rite Aid data breach disclosed in June 2024, you may be eligible to claim up to $10,000 from a class action settlement.

Rite Aid Corporation has agreed to pay $6.8 million to settle a class action lawsuit alleging that it failed to adequately protect the personal information of its customers and affiliated individuals.

The lawsuit claims that Rite Aid's inadequate security measures allowed unauthorized third-party cybercriminals to access sensitive personal information, including names, addresses, dates of birth, driver's license numbers, and other government-issued identification.

Who can file a claim?

You are a eligible class members if::

You must be a natural person (an individual, not a business or entity) residing in the United States.
Your personal information must have been compromised or potentially compromised in the Rite Aid data breach disclosed around June 6, 2024.
You must have received a notification from Rite Aid informing you about the data breach incident.

How much can class members get?

Class members may choose between two types of claims:

Documented Loss Payment: Class members can claim up to $10,000 per person for documented expenses or losses directly related to the data breach. Such expenses might include unreimbursed fraudulent charges, professional fees related to identity theft, credit monitoring costs, and other related expenses.

Cash Fund Payment: Alternatively, class members can opt for a flat cash payment without providing documentation. The exact amount of this payment will depend on the number of valid claims submitted and the remaining settlement funds after documented loss payments have been made.

The settlement fund prioritizes payments for documented loss claims. After these claims are paid, any remaining funds will be distributed equally among valid cash fund payment claims.

For example, if $1,000,000 remains after documented loss payments and there are 10,000 valid cash fund claims, each claimant would receive approximately $100 ($1,000,000 ÷ 10,000 = $100).

How to claim a payout

To receive compensation, class members must submit a claim form either online or by mail. You can download the PDF claim form and mail it to the settlement administrator.

Settlement Administrator's mailing address: Rite Aid Data Breach Settlement Administrator c/o Kroll Settlement Administration LLC, PO Box 225391, New York, NY 10150-5391

Alternatively, you can submit your claim online via the official settlement website when the online claim form becomes available.

The deadline to submit your claim form is July 7, 2025.

What documentation is required?

If you are claiming a Documented Loss Payment, you must provide reasonable documentation to support your claimed losses.

Acceptable documentation includes:

Account statements showing unauthorized charges.
Receipts for professional fees related to identity theft.
Receipts for credit monitoring services purchased after June 6, 2024.
Other relevant documents proving your expenses.

Claim instructions

Follow these detailed steps to submit your claim:

Visit the settlement website when the online claim portal goes live or download the PDF claim form.
Complete your personal information, including your full name, mailing address, phone number, and email address.
Select the type of payment you are claiming (Documented Loss Payment or Cash Fund Payment).
If claiming a Documented Loss Payment, attach all required supporting documentation.
Sign and date your claim form.
Submit your claim form online or mail it to the settlement administrator by July 7, 2025.

Payout options

Class members can choose a payment option if they use the online claim form:

Electronic payment (if the claim is submitted online)
Check mailed directly to your provided address

$6.8 Million settlement fund

The settlement fund of $6,800,000 will cover payments to class members, attorneys' fees, administrative costs, taxes, and service awards:

Settlement administration costs: TBD
Attorneys' fees: Up to 35% of the settlement fund ($2,380,000).
Attorneys' expenses: Reasonable litigation costs (TBD).
Service awards to class representatives: Up to $3,500 each.
Payments to class members: Remaining funds after the above deductions.

What if there are unclaimed settlement funds?

This settlement fund is what's called a "non-reversionary" fund, which means unclaimed funds will not be returned to Rite-Aid.

If there are funds leftover after 120 days from the distribution of settlement payouts, payments of equal amounts will be made to those who submitted valid cash fund payments and successfully had their payout deposited. This process will continue until unclaimed settlement fund payments would be less than $3 per claimant.

Afterwards, any remaining funds will be donated to the Pennsylvania Interest on Lawyers Trust Account Board.

Important dates

Deadline to File a Claim: July 7, 2025
Deadline to Opt-Out: June 6, 2025
Final Approval Hearing: July 17, 2025

When is the Rite Aid Data Breach Settlement payout date?

The court will hold a final approval hearing on July 17, 2025, to determine if the settlement is fair and reasonable. If finally approved and appeals (if any) are resolved, payments will be distributed to eligible class members who submitted valid claims within 30 days.

Why was Rite Aid sued over the data breach?

The class action lawsuit against Rite Aid alleges that the company failed to adequately protect personal information, resulting in unauthorized access by cybercriminals. Rite Aid denies any wrongdoing but agreed to settle the lawsuit to avoid the uncertainty and costs associated with ongoing litigation.

What happens next?

The court will hold a final approval hearing on July 17, 2025, to determine if the settlement is fair and reasonable. If approved, payments will be distributed to eligible class members who submitted valid claims.