MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedTargetedIDENTITY_BASICLowContained
American Associated Pharmacies
bd_98c35631ecb48121 · schema v1 · pii pii-v1
Full breach record for American Associated Pharmacies →American Associated Pharmacies notified the New Hampshire Attorney General on November 17, 2025, regarding a cybersecurity incident detected on October 23, 2024. The incident involved unauthorized access starting October 13, 2024, resulting in system encryption (ransomware) and data exfiltration. 11 New Hampshire residents were affected, with their names potentially exposed. The company engaged forensic investigators, law enforcement, and offered 12 months of credit monitoring.
Leak gap clock✗ Leak >180d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by embargo about this victim predates this filing by 369 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d85f7aee45798f06Indiana State AGfiled 2025-11-12(5d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/american-associated-pharmacies-20251117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2025
- Raw hash
- 600e588d3e62b03eff698c2d5d5c6b6719d6854ed527e88a384ba1c51d4f2ea8
Reporting entity
- Name
- American Associated Pharmaciesnorm: american associated pharmacies
Victim entity
- Name
- American Associated Pharmaciesnorm: american associated pharmacies
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- Nov 12, 2025
- Affected individuals
- 11
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reporting the matter to law enforcement
Compliance
- Time to disclose
- 13 months(390 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.