Hi-School Pharmacy
bd_6726901987c87290 · schema v1 · pii pii-v1
Full breach record for Hi-School Pharmacy →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group LockBit 3.x on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Sanctions caution: LockBit 3.x carries US sanctions exposure — OFAC has designated the group or its operators. Public reporting is permitted (informational-materials exemption, 50 U.S.C. § 1702(b)(3)) — but any payment or material support may violate sanctions. Consult counsel before engaging.
Source: Ransomware.live
Post text · scraped from the leak site
Hi School Pharmacy has a history founded in the tradition of the classic corner drug store.The original store was opened by Dick Yetman in the early 1900’s. It was named “High School Store” due to its location across the street from Vancouver Hig...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 28, 2023
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Montana State AGbd_419a2f3dbc67d2a52023-12-05 · +7dVerified
- HHS OCRbd_54ad2220f467c6e72023-12-05 · +7dVerified
- Maine State AGbd_921beb7cfd1439e92023-12-05 · +7dVerified
- Massachusetts State AGbd_5581dbf8513ed2152023-12-06 · +8dVerified by operator
Show 2 more filings ↓Show fewer ↑up to 8d gap
- Washington State AGbd_5fcd199d53571b282023-12-06 · +8dVerified
- Oregon State AGbd_cf8c1fc5deb781a02023-12-06 · +8dVerified
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Nov 28, last Dec 6 (OR) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.