Latest / California / February 2022

CVS Pharmacy

CVS Pharmacy notified California AG on Feb 11, 2022 of a data breach, which occurred on Jan 6, 2022. Data exposed: Social Security number, Financial / bank account, Medical / health information, Date of birth, Email address, Postal address, Name.

All 3 filings by CVS Pharmacy, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
CVS Pharmacy
Source
California AG · source record
Date reported
Feb 11, 2022
Date(s) of breach
Thursday, January 6, 2022
Residents affected
Not published by this source
Data exposed
Social Security number Financial / bank account Medical / health information Date of birth Email address Postal address Name
Notice letter
Sample notice (PDF)
Discovered
Jan 25, 2022, as stated in the letter
"On January 25, 2022, we determined that certain elements of personal information pertaining to CVS/pharmacy customers, including yourself, may have been obtained as a result of this activity."
Days to notice
17 days from discovery (Jan 25, 2022) to the California record (Feb 11, 2022). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
First seen by BreachTally
2026-10-30 16:04 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:04 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by CVS Pharmacy

OrganizationSourceStateReportedResidents affectedData exposed
CVS Pharmacy Massachusetts OCABR MA Mar 20, 2026 1 Financial / bank accountDriver's license / state ID
CVS Pharmacy, Inc. California AG CA Sep 11, 2015 Not published Financial / bank accountUsernames / passwordsEmail addressPhone number+2

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.