SAV-RX
ent_00b8e3b600c7ccd95c829ba7
Disclosures
8
State AG · 8 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
2,812,336
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- SAV-RX
- Normalized
- sav rx— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- api.savrx.com
Disclosure history (8)newest first
- Massachusetts State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-05-24. 5,905 Massachusetts residents were affected.
- Maine State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx, a healthcare services company, reported a data breach that affected 5,935 residents of Maine. The breach was an external system hack that occurred on October 8, 2023, and was discovered on April 30, 2024. The compromised data included names and Social Security numbers. In response, the company began notifying affected individuals on May 24, 2024, and offered two years of complimentary credit monitoring and identity theft protection services.
- Vermont State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx notified consumers of a data breach where an unauthorized third party accessed non-clinical systems containing PHI and employee PII. The intrusion began around Oct 3, 2023, and was discovered Oct 8, 2023. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring. 1,006 Rhode Island residents were explicitly identified as affected.
- California State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx experienced unauthorized access to its IT systems starting around October 3, 2023, discovered on October 8, 2023. An external actor accessed non-clinical systems containing protected health information (PHI) and employee personal data. The company engaged forensic experts, contained the incident, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring.
- Montana State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx notified individuals of a data breach where an unauthorized third party accessed non-clinical systems containing PHI and employee PII. Access occurred around Oct 3, 2023; detected Oct 8, 2023. Forensic review confirmed on April 30, 2024. Law enforcement notified. Credit monitoring offered.
- Washington State AGas reporting2024-05-24
A&A Services d/b/a Sav-Rx reported unauthorized access to non-clinical systems containing PHI and employee PII. Access occurred Oct 3-10, 2023; discovered Apr 30, 2024. 69,051 Washington residents affected. Law enforcement notified; credit monitoring offered.
- Delaware State AGas victim2024-05-24
A&A Services d/b/a Sav-Rx notified Delaware AG of a data breach affecting approximately 1,006 Rhode Island residents (and others in MD, NM, NY, NC, DC). The incident involved unauthorized access to non-clinical systems containing PHI and employee PII starting Oct 3, 2023. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
- Illinois State AGas victim2024-05-01
A&A SERVICES DBA. SAV-RX filed a data-breach notice with the Illinois Attorney General in May 2024 (case 24-05-058). The register records the breach as discovered on October 3, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.