The nation's third-largest drug store chain has agreed to settle Federal Trade Commission (FTC) charges that it failed to protect customers' and employees' sensitive financial and medical information, The Wall Street Journal reports. Rite Aid Corporation will establish a comprehensive information security program and will undergo an independent audit of its security program every two years for the next 20 years, according to an FTC press release. The company will also pay $1 million to resolve Department of Health and Human Services claims that it failed to protect customers' sensitive health information. "Companies that say they will protect personal information shouldn't be tossing patient prescriptions and employment applications in an open dumpster," said FTC Chairman Jon Leibowitz. (Registration may be required to access this story.)
Full Story