**Walgreens Faces Legal Action Over Credit Card Receipt Data Exposure**
A recent lawsuit alleges that Walgreens violated the Fair and Accurate Credit Transactions Act (FACTA) of 2003 by improperly printing payment card details on a customer’s receipt. The plaintiff claims the drugstore chain failed to comply with the law’s truncation requirement, which mandates that receipts display only the last five digits of a card number to protect consumer data.
Instead, the receipt in question reportedly included the first six and last four digits of the 16-digit card number, potentially exposing sensitive financial information. FACTA was enacted to prevent identity theft by limiting the disclosure of full card numbers on printed receipts.
The case highlights ongoing concerns about retailer compliance with data protection laws, particularly in point-of-sale systems. If proven, the violation could result in penalties under FACTA, which allows for statutory damages in such cases. The outcome may set a precedent for how businesses handle payment receipts moving forward.
Walgreens cybersecurity rating report: https://www.rankiteo.com/company/walgreens
"id": "WAL1766022901",
"linkid": "walgreens",
"type": "Breach",
"date": "12/2025",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 'At least one (Marianna Wharry)',
'industry': 'Healthcare/Retail',
'name': 'Walgreens',
'type': 'Retail Pharmacy'}],
'data_breach': {'number_of_records_exposed': 'At least one',
'personally_identifiable_information': 'Partial payment card '
'number',
'sensitivity_of_data': 'High (partial payment card details)',
'type_of_data_compromised': 'Payment card information'},
'description': 'The plaintiff, Marianna Wharry, brought a claim against '
'Walgreens under the Fair and Accurate Credit Transactions Act '
"of 2003, alleging the company violated the law's truncation "
'requirement by including the first six digits and the last '
'four digits of her 16-digit card number on her receipt.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'regulatory violation',
'data_compromised': 'Payment card information (first six and last '
'four digits of 16-digit card number)',
'identity_theft_risk': 'Increased risk of identity theft or '
'payment fraud',
'legal_liabilities': 'Lawsuit under the Fair and Accurate Credit '
'Transactions Act of 2003',
'payment_information_risk': 'Exposure of partial payment card '
'details',
'systems_affected': 'Point-of-sale (POS) or receipt generation '
'system'},
'post_incident_analysis': {'root_causes': 'Failure to properly truncate '
'payment card information on '
'receipts as required by FACTA'},
'references': [{'source': 'Legal case filing'}],
'regulatory_compliance': {'legal_actions': 'Lawsuit filed by plaintiff',
'regulations_violated': ['Fair and Accurate Credit '
'Transactions Act of 2003 '
'(FACTA)']},
'title': 'Walgreens Credit Card Receipt Data Exposure',
'type': 'Data Exposure',
'vulnerability_exploited': 'Improper truncation of payment card information '
'on receipts'}