MalwareRetail & ConsumerRetailRansomwareStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

American Associated Pharmacies

bd_a055985a15fb12b5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2024

Filed

Nov 12, 2025

To disclose

13 months

Affected

33state residents only

Linked

10 records

Confidence

66%

Full breach record for American Associated Pharmacies →

American Associated Pharmacies (AAP) disclosed a ransomware incident in October 2024. An unauthorized actor gained access on Oct 13, 2024, and was detected on Oct 23. Systems were encrypted and data exfiltrated. AAP notified law enforcement, engaged forensic experts, and sent consumer notifications on Nov 11, 2025, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

Incident timeline

undetected · 10 days

discovery → filing · 13 months / 385 days

Oct 13, 2024

Begins

Oct 23, 2024

Discovered

Nov 12, 2025

Filed

vs. sector median

+46 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by embargo about this victim was first seen 364 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_026dc026d7edd5202024-11-12 · +364dVerified

Regulatory filings (8) · sorted by filing gap

California State AGbd_5752d2fa56e1021f2025-11-12Verified
Maine State AGbd_6f03581859047e742025-11-12Candidate
Vermont State AGbd_740593241b9440ec2025-11-12Verified
Nebraska State AGbd_c555b37ef9fc19ae2025-11-12Verified by operator

Show 4 more filings ↓up to 324d gap

Indiana State AGbd_d85f7aee45798f062025-11-12Verified by operator
Washington State AGbd_fe8758ed5a20a1302025-11-12Verified
New Hampshire State AGbd_98c35631ecb481212025-11-17 · +5dVerified by operator
Massachusetts State AGbd_c346f35887da0b7e2024-12-23 · +324dVerified by operator

Name: American Associated Pharmacies
norm: american associated pharmacies

Name: American Associated Pharmacies
norm: american associated pharmacies
Industry: Retail & Consumerllm

Discovered: Oct 23, 2024
Breach occurred: Oct 13, 2024
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 11, 2025
Affected individuals: 33state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: reporting this Incident to relevant government agencies
Initial access: valid_credentials

During the incident: Shutting down systems proactively
Resetting passwords
Alerting federal law enforcement
Engaging experienced cybersecurity professionals to assist
Changes made: Expanding our usage of multifactor authentication
Resetting all passwords
Implementing additional monitoring tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGDec 23 · first

California State AG+324d

Maine State AG+324d

Vermont State AG+324d

Nebraska State AG+324d

Indiana State AG+324d

Washington State AG+324d

Montana State AG+324d · this page

New Hampshire State AG+329d

Pattern: first filing Dec 23 (MA), last Nov 17 (NH) — a 329-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/11/Consumer-notification-letter-23.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 12, 2025
Raw hash: a68a8965a9aacfbecf3df286be521f0d4a6b430834f984680b8e8be8f07e8cb8

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityAmerican Associated Pharmacies

Victim entityAmerican Associated Pharmacies

Incidentdiscovered Oct 23, 2024

Stated responseShutting down systems proactively

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov