SAV-RX
bd_814ec92dc4fd6b82 · schema v1 · pii pii-v1
Full breach record for SAV-RX →A&A Services d/b/a Sav-Rx experienced unauthorized access to its IT systems starting around October 3, 2023, discovered on October 8, 2023. An external actor accessed non-clinical systems containing protected health information (PHI) and employee personal data. The company engaged forensic experts, contained the incident, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 3, 2023
Begins
Oct 8, 2023
Discovered
May 24, 2024
Filed
vs. sector median
+22 wks slower
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_182a0aeca74b988d2024-05-24Verified
- Maine State AGbd_3dc61801e1d2468b2024-05-24Candidate
- Vermont State AGbd_6eca727782b228442024-05-24Verified
- Montana State AGbd_a711b87c3aaa61fb2024-05-24Verified
Show 2 more filings ↓Show fewer ↑up to 23d gap
- Delaware State AGbd_e27bf8cc5118b8fa2024-05-24Verified
- Illinois State AGbd_be1e61050e8c84be2024-05-01 · +23dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing May 1 (IL), last May 24 (CA) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.