HackingCustomer Data InvolvedLow
American Associated Pharmacies
bd_6f03581859047e74 · schema v1 · pii pii-v1
Full breach record for American Associated Pharmacies →American Associated Pharmacies, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, described as an external system breach (hacking), occurred on October 13, 2024, and was discovered on October 23, 2024. The incident affected 25 Maine residents. The company began notifying affected individuals on November 12, 2025, and offered 12 months of identity theft and credit monitoring services through Experian.
Maine clockDiscovered Oct 23, 2024 → Filed with AG Nov 12, 2025385d ✗ ME AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_026dc026d7edd520Leak Siteembargofiled 2024-11-12(364d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_5752d2fa56e1021fCalifornia State AGfiled 2025-11-12Verified
- bd_740593241b9440ecVermont State AGfiled 2025-11-12Verified
- bd_a055985a15fb12b5Montana State AGfiled 2025-11-12Verified
- bd_fe8758ed5a20a130Washington State AGfiled 2025-11-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4ea1237-432a-4d8d-bb3c-5ae70d44b107.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 12, 2025
- Raw hash
- 33907c67746f12d271eb688a45d9ba58f6965582106bf2ac04f94b809d7a9da0
Reporting entity
- Name
- American Associated Pharmaciesnorm: american associated pharmacies
Victim entity
- Name
- American Associated Pharmaciesnorm: american associated pharmacies
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- Nov 12, 2025
- Affected individuals
- 25
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 13 months(385 days from discovery to filing)
- Compliance flags
- ME AG >90d · 385dME resident >180d · 385d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2024→ Filed with AG: Nov 12, 2025385d 90 days ME AG >90d Maine Discovered: Oct 23, 2024→ Notified: Nov 12, 2025385d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.