Latest / California / February 2022
CVS Pharmacy
CVS Pharmacy notified California AG on Feb 11, 2022 of a data breach, which occurred on Jan 6, 2022. Data exposed: Social Security number, Financial / bank account, Medical / health information, Date of birth, Email address, Postal address, Name.
All 3 filings by CVS Pharmacy, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- CVS Pharmacy
- Source
- California AG · source record
- Date reported
- Feb 11, 2022
- Date(s) of breach
- Thursday, January 6, 2022
- Residents affected
- Not published by this source
- Data exposed
- Social Security number Financial / bank account Medical / health information Date of birth Email address Postal address Name
- Notice letter
- Sample notice (PDF)
- Discovered
- Jan 25, 2022, as stated in the letter"On January 25, 2022, we determined that certain elements of personal information pertaining to CVS/pharmacy customers, including yourself, may have been obtained as a result of this activity."
- Days to notice
- 17 days from discovery (Jan 25, 2022) to the California record (Feb 11, 2022). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
- First seen by BreachTally
- 2026-10-30 16:04 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by CVS Pharmacy
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| CVS Pharmacy | MA | Mar 20, 2026 | 1 |
| CVS Pharmacy, Inc. | CA | Sep 11, 2015 | Not published |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.