Latest / California / September 2015

CVS Pharmacy, Inc.

CVS Pharmacy, Inc. notified California AG on Sep 11, 2015 of a data breach, which occurred on Jul 14, 2015. Data exposed: Financial / bank account, Usernames / passwords, Email address, Phone number, Postal address, Name.

All 3 filings by CVS Pharmacy, Inc., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
CVS Pharmacy, Inc.
Source
California AG · source record
Date reported
Sep 11, 2015
Date(s) of breach
Thursday, June 19, 2014Tuesday, July 14, 2015
Residents affected
Not published by this source
Data exposed
Financial / bank account Usernames / passwords Email address Phone number Postal address Name
Notice letter
Sample notice (PDF)
Days to notice
59 days from the end of the breach window (Jul 14, 2015, no discovery date in the letter) to the California record (Sep 11, 2015). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
First seen by BreachTally
2026-10-30 16:22 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:22 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by CVS Pharmacy, Inc.

OrganizationSourceStateReportedResidents affectedData exposed
CVS Pharmacy Massachusetts OCABR MA Mar 20, 2026 1 Financial / bank accountDriver's license / state ID
CVS Pharmacy California AG CA Feb 11, 2022 Not published Social Security numberFinancial / bank accountMedical / health informationDate of birth+3

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.