MalwareHealthcareRetail & ConsumerHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)LowContained

American Associated Pharmacies

bd_5752d2fa56e1021f · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2024

Filed

Nov 12, 2025

To disclose

13 months

Affected

Not disclosed

Linked

10 records

Confidence

64%

Full breach record for American Associated Pharmacies →

American Associated Pharmacies experienced a ransomware incident in October 2024. Unauthorized access began on October 13, 2024, and was detected on October 23, 2024, when suspicious activity including system encryption was observed. The attacker exfiltrated data, potentially impacting names and other personal information. The company contained the incident, engaged forensic experts, notified law enforcement, and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 23, 2024 → Notified Nov 11, 2025384d ✗ CA 60-day late13 months discovery → filing

Incident timeline

undetected · 10 days

discovery → filing · 13 months / 385 days

Oct 13, 2024

Begins

Oct 23, 2024

Discovered

Nov 12, 2025

Filed

vs. sector median

+46 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by embargo about this victim was first seen 364 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_026dc026d7edd5202024-11-12 · +364dVerified

Regulatory filings (8) · sorted by filing gap

Maine State AGbd_6f03581859047e742025-11-12Candidate
Vermont State AGbd_740593241b9440ec2025-11-12Verified
Montana State AGbd_a055985a15fb12b52025-11-12Verified
Nebraska State AGbd_c555b37ef9fc19ae2025-11-12Verified by operator

Show 4 more filings ↓up to 324d gap

Indiana State AGbd_d85f7aee45798f062025-11-12Verified by operator
Washington State AGbd_fe8758ed5a20a1302025-11-12Verified
New Hampshire State AGbd_98c35631ecb481212025-11-17 · +5dVerified by operator
Massachusetts State AGbd_c346f35887da0b7e2024-12-23 · +324dVerified by operator

Name: American Associated Pharmacies
norm: american associated pharmacies

Name: American Associated Pharmacies
norm: american associated pharmacies
Industry: HealthcarellmRetail & Consumerllm

Discovered: Oct 23, 2024
Breach occurred: Oct 13, 2024 – Oct 23, 2024
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 11, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reporting this Incident to relevant government agencies

During the incident: Shutting down systems proactively
Resetting passwords
Alerting federal law enforcement
Engaging experienced cybersecurity professionals to assist
Changes made: Expanding our usage of multifactor authentication
Resetting all passwords
Implementing additional monitoring tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: CA 60-day late · 384dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 23, 2024
→ Notified: Nov 11, 2025
384d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 23, 2024 → Notified: Nov 11, 2025	384d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGDec 23 · first

Maine State AG+324d

Vermont State AG+324d

Montana State AG+324d

Nebraska State AG+324d

Indiana State AG+324d

Washington State AG+324d

California State AG+324d · this page

New Hampshire State AG+329d

Pattern: first filing Dec 23 (MA), last Nov 17 (NH) — a 329-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-614123
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2025
Raw hash: e26c1397fee4e69ce987d424bde92690125a228c18d062915ff6922bfbab4870

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityAmerican Associated Pharmacies

Victim entityAmerican Associated Pharmacies

Incidentdiscovered Oct 23, 2024

Stated responseShutting down systems proactively

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov