HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
SAV-RX
bd_e27bf8cc5118b8fa · schema v1 · pii pii-v1
Full breach record for SAV-RX →A&A Services d/b/a Sav-Rx notified Delaware AG of a data breach affecting approximately 1,006 Rhode Island residents (and others in MD, NM, NY, NC, DC). The incident involved unauthorized access to non-clinical systems containing PHI and employee PII starting Oct 3, 2023. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_6eca727782b22844Vermont State AGfiled 2024-05-24Verified
- bd_814ec92dc4fd6b82California State AGfiled 2024-05-24Verified
- bd_a711b87c3aaa61fbMontana State AGfiled 2024-05-24Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/05/AA-Services-Letter-Templates.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2024
- Raw hash
- db3232d2d46400846735a50baea38f0ae251314e24088beefd120f71f924d4fd
Reporting entity
- Name
- SAV-RXnorm: sav rx
- Domain
- api.savrx.com
Victim entity
- Name
- SAV-RXnorm: sav rx
- Domain
- api.savrx.com
Incident
- Discovered
- Oct 8, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,006
- Data types
- PHIHEALTH_BASICIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement authorities
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(229 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.