Texas suit says CVS dumped customer data

Texas Attorney General Greg Abbott sued CVS/Caremark Corp. today, alleging pharmacy employees dumped credit card numbers, medical information, and other sensitive material from more than 1,000 customers into a garbage container.

The Woonsocket, R.I., company was accused of failing to protect its customers from identity theft at the store in Liberty, near Houston. The lawsuit alleges employees dumped the records behind a store that apparently was being vacated by CVS.

CVS did not immediately return a telephone call seeking comment.

The records, found March 19, included credit and debit card numbers and prescription forms that had customers' names, addresses, dates of birth, and types of medications, Abbott said.

CVS is accused of violating provisions of the 2005 Identity Theft Enforcement and Protection Act, which requires the protection and proper destruction of clients' sensitive personal information. If found guilty, CVS could have to pay up to $50,000 per violation.

Abbott's office also charged the company with violations under Chapter 35 of the Business and Commerce Code, which requires businesses to develop retention and disposal procedures for their clients' personal information. The code provides for civil penalties of up to $500 for each abandoned record.

Abbott said his office is investigating whether this is normal practice for CVS at other Texas stores.
(AP)