Rite Aid’s $6.8 Million Data Breach Deal Given Initial Court Nod

Rite Aid Corp. would pay $6.8 million to settle a proposed class action alleging it negligently failed to protect the personal information of approximately 2.2 million people that was exposed in a June 2024 data breach, under a deal given initial approval Tuesday by a federal court.

Class members would be entitled to up to $10,000 in reimbursement for documented out-of-pocket losses from the breach, or a pro-rata payment from the net settlement fund after deduction of attorneys’ fees and the costs of administration, according to the plaintiffs’ motion for preliminary approval of the settlement filed in the US District ...