CVS Pharmacy, Inc.
- Aliases / services
- CVS / CVS/pharmacy / CVSファーマシー / CVS Pharmacy, Inc.
- Official website
- https://www.cvs.com/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
CVS.com online pharmacy accounts
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30
The February 10, 2022 notice describes password spraying that may have exposed names, birth dates, contact details and limited prescription information. SSNs and financial information were excluded; internal systems were not affected.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Reset the password at CVS.com/reset or when prompted on sign-in. Use distinct passwords across services and report suspicious account activity.
Official service URL
Source URLs
- Official operator evidencehttps://www.cvs.com/retail/help/terms_of_use/Service and operation documentation
- Official incident noticehttps://oag.ca.gov/system/files/Password%20Spray%20Individual%20Notice%20Template%20final_v2___Static_Proof.pdfService and operation documentation
Related official sources
- Official operator evidenceOfficial information directoryIdentifies CVS Pharmacy, Inc. and the relevant scope.
- Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.
Comments