Where does the Walgreen Co. case file come from?

Every entry is taken from the breach report Walgreen Co. lodged with the Illinois Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Walgreen Co. Data Breach

This file collects the dated facts on record for the Walgreen Co. incident. The state report is dated July 14, 2025.

Timeline

July 14, 2025Report filed in IllinoisDate the notice was lodged with the Illinois Attorney General.

Case facts

Filing state: Illinois
Date reported: July 14, 2025
Receiving office: Illinois Attorney General

Case notes

Walgreen Co., a major retail pharmacy chain, filed a data breach notification with the Illinois Attorney General's office on July 14, 2025. This report confirms a security incident at the company that potentially exposed personal information. The details surrounding the breach, including how it occurred and the full scope of its impact, are currently under investigation.

Given Walgreen Co.'s dual role as a retail merchant and a healthcare provider, the company manages a significant volume of personal consumer data. While the specific categories of information involved in this incident have not been detailed in the public filing, such a breach can encompass various forms of personal identifiers and sensitive records, underscoring the importance of vigilance for affected individuals.

The exposure of personal information, regardless of its specific type, can create risks for individuals. These risks can include, but are not limited to, potential identity theft, fraudulent use of personal accounts, or attempts at phishing by malicious actors. It is important for individuals to understand that any compromise of their data requires careful monitoring.

Individuals who receive an official notification from Walgreen Co. are advised to take immediate steps to protect themselves. These general precautions typically include regularly reviewing account statements, credit reports, and any explanations of benefits for unusual activity. Consider enabling multi-factor authentication on online accounts where available, and be highly suspicious of unsolicited communications requesting personal details.

Questions about this case file

Where does the Walgreen Co. case file come from?: Every entry is taken from the breach report Walgreen Co. lodged with the Illinois Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Illinois data breaches

Named in the Walgreen Co. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Illinois case files