MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)MediumContained

American Associated Pharmacies

bd_6f03581859047e74 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 23, 2024

Filed

Nov 12, 2025

To disclose

13 months

Affected · nationwide

8,04225 in this filing

Linked

10 records

Confidence

66%

Full breach record for American Associated Pharmacies →

American Associated Pharmacies experienced a ransomware incident in October 2024. Unauthorized access occurred on October 13, 2024, and was detected on October 23, 2024. The attacker encrypted systems and exfiltrated personal information (names and other identifiers) from approximately 8,042 individuals, including 25 Maine residents. The company engaged law enforcement and forensic experts, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 13 months / 385 days

Oct 13, 2024

Begins

Oct 23, 2024

Discovered

Nov 12, 2025

Filed

vs. sector median

+46 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by embargo about this victim was first seen 364 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_026dc026d7edd5202024-11-12 · +364dVerified

Regulatory filings (8) · sorted by filing gap

California State AGbd_5752d2fa56e1021f2025-11-12Verified
Vermont State AGbd_740593241b9440ec2025-11-12Verified
Montana State AGbd_a055985a15fb12b52025-11-12Verified
Nebraska State AGbd_c555b37ef9fc19ae2025-11-12Verified by operator

Show 4 more filings ↓up to 324d gap

Indiana State AGbd_d85f7aee45798f062025-11-12Verified by operator
Washington State AGbd_fe8758ed5a20a1302025-11-12Verified
New Hampshire State AGbd_98c35631ecb481212025-11-17 · +5dVerified by operator
Massachusetts State AGbd_c346f35887da0b7e2024-12-23 · +324dVerified by operator

Name: American Associated Pharmacies
norm: american associated pharmacies

Name: American Associated Pharmacies
norm: american associated pharmacies
Industry: Healthcarellm

Discovered: Oct 23, 2024
Breach occurred: Oct 13, 2024
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 12, 2025
Affected individuals: 8,042state + nationwide
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reporting this Incident to relevant government agencies

During the incident: Shutting down systems proactively
Resetting passwords
Alerting federal law enforcement
Engaging experienced cybersecurity professionals to assist
Changes made: Expanding our usage of multifactor authentication
Resetting all passwords
Implementing additional monitoring tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 385dME resident >60d · 385d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 23, 2024
→ Filed with AG: Nov 12, 2025
385d 30 days (soft) ME AG >30d
Maine
Discovered: Oct 23, 2024
→ Notified: Nov 12, 2025
385d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 23, 2024 → Filed with AG: Nov 12, 2025	385d	30 days (soft)	ME AG >30d
Maine	Discovered: Oct 23, 2024 → Notified: Nov 12, 2025	385d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGDec 23 · first

California State AG+324d

Vermont State AG+324d

Montana State AG+324d

Nebraska State AG+324d

Indiana State AG+324d

Washington State AG+324d

Maine State AG+324d · this page

New Hampshire State AG+329d

Pattern: first filing Dec 23 (MA), last Nov 17 (NH) — a 329-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4ea1237-432a-4d8d-bb3c-5ae70d44b107.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2025
Raw hash: 4b1065f1826f73d134536ec9cd50518f665642518a0b6afd5fb0606567a59c81

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityAmerican Associated Pharmacies

Victim entityAmerican Associated Pharmacies

Incidentdiscovered Oct 23, 2024

Stated responseShutting down systems proactively

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov