DisclosureLens
MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedRansom DemandedTargetedIdentity (basic)LowContained

American Associated Pharmacies

bd_98c35631ecb48121 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2024

Filed

Nov 17, 2025

To disclose

13 months

Affected

11state residents only

Linked

10 records

Confidence

66%
Full breach record for American Associated Pharmacies →

American Associated Pharmacies notified the New Hampshire Attorney General on November 17, 2025, regarding a cybersecurity incident detected on October 23, 2024. The incident involved unauthorized access starting October 13, 2024, resulting in system encryption (ransomware) and data exfiltration. 11 New Hampshire residents were affected, with their names potentially exposed. The company engaged forensic investigators, law enforcement, and offered 12 months of credit monitoring.

Leak gap clock✗ Leak >180d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days
discovery → filing · 13 months / 390 days

Oct 13, 2024

Begins

Oct 23, 2024

Discovered

Nov 17, 2025

Filed

vs. sector median

+47 wks slower

This filing is one of 10 records about the same incident.View merged incident
A leak claim by embargo about this victim was first seen 369 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 329d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗
Massachusetts State AGDec 23 · first
California State AG+324d
Maine State AG+324d
Vermont State AG+324d
Montana State AG+324d
Nebraska State AG+324d
Indiana State AG+324d
Washington State AG+324d
New Hampshire State AG+329d · this page

Pattern: first filing Dec 23 (MA), last Nov 17 (NH) — a 329-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.