MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)LowContained

American Associated Pharmacies

bd_740593241b9440ec · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2024

Filed

Nov 12, 2025

To disclose

13 months

Affected

Not disclosed

Linked

10 records

Confidence

66%

Full breach record for American Associated Pharmacies →

American Associated Pharmacies (AAP) disclosed a ransomware incident detected on October 23, 2024, with initial access occurring October 13, 2024. The attacker encrypted systems and exfiltrated data, potentially including names and addresses. AAP proactively shut down systems, reset passwords, engaged forensic experts, and notified law enforcement. AAP is offering credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 13 months / 385 days

Oct 13, 2024

Begins

Oct 23, 2024

Discovered

Nov 12, 2025

Filed

vs. sector median

+46 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by embargo about this victim was first seen 364 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_026dc026d7edd5202024-11-12 · +364dVerified

Regulatory filings (8) · sorted by filing gap

California State AGbd_5752d2fa56e1021f2025-11-12Verified
Maine State AGbd_6f03581859047e742025-11-12Candidate
Montana State AGbd_a055985a15fb12b52025-11-12Verified
Nebraska State AGbd_c555b37ef9fc19ae2025-11-12Verified by operator

Show 4 more filings ↓up to 324d gap

Indiana State AGbd_d85f7aee45798f062025-11-12Verified by operator
Washington State AGbd_fe8758ed5a20a1302025-11-12Verified
New Hampshire State AGbd_98c35631ecb481212025-11-17 · +5dVerified by operator
Massachusetts State AGbd_c346f35887da0b7e2024-12-23 · +324dVerified by operator

Name: American Associated Pharmacies
norm: american associated pharmacies

Name: American Associated Pharmacies
norm: american associated pharmacies
Industry: Healthcarellm

Discovered: Oct 23, 2024
Breach occurred: Oct 13, 2024 – Oct 23, 2024
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 11, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reporting this Incident to relevant government agencies

During the incident: Shutting down systems proactively
Resetting passwords
Alerting federal law enforcement
Engaging experienced cybersecurity professionals to assist
Changes made: Expanding our usage of multifactor authentication
Resetting all passwords
Implementing additional monitoring tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGDec 23 · first

California State AG+324d

Maine State AG+324d

Montana State AG+324d

Nebraska State AG+324d

Indiana State AG+324d

Washington State AG+324d

Vermont State AG+324d · this page

New Hampshire State AG+329d

Pattern: first filing Dec 23 (MA), last Nov 17 (NH) — a 329-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-11-12-american-associated-pharmacies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2025
Raw hash: 4f651e54f0e48d534e9035b619156344ac15fc8237954c5742c688693eefd717

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityAmerican Associated Pharmacies

Victim entityAmerican Associated Pharmacies

Incidentdiscovered Oct 23, 2024

Stated responseShutting down systems proactively

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov