American Associated Pharmacies

American Associated Pharmacies notified the New Hampshire Attorney General on November 17, 2025, regarding a cybersecurity incident detected on October 23, 2024. The incident involved unauthorized access starting October 13, 2024, resulting in system encryption (ransomware) and data exfiltration. 11 New Hampshire residents were affected, with their names potentially exposed. The company engaged forensic investigators, law enforcement, and offered 12 months of credit monitoring.

American Associated Pharmacies experienced a ransomware incident in October 2024. Unauthorized access began on October 13, 2024, and was detected on October 23, 2024, when suspicious activity including system encryption was observed. The attacker exfiltrated data, potentially impacting names and other personal information. The company contained the incident, engaged forensic experts, notified law enforcement, and is offering credit monitoring to affected individuals.

American Associated Pharmacies, a healthcare organization, reported a data breach to the Maine Attorney General. The breach, described as an external system breach (hacking), occurred on October 13, 2024, and was discovered on October 23, 2024. The incident affected 25 Maine residents. The company began notifying affected individuals on November 12, 2025, and offered 12 months of identity theft and credit monitoring services through Experian.

American Associated Pharmacies (AAP) disclosed a ransomware incident detected on October 23, 2024, with initial access occurring October 13, 2024. The attacker encrypted systems and exfiltrated data, potentially including names and addresses. AAP proactively shut down systems, reset passwords, engaged forensic experts, and notified law enforcement. AAP is offering credit monitoring services to affected individuals.

American Associated Pharmacies reported a data breach to the Montana Attorney General. The breach was reported on 2025-11-12. The breach occurred on 10/23/2024. 33 Montana residents were affected.

American Associated Pharmacies reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-13 and was reported on 2025-11-12. 28 Indiana residents were affected. 8,042 individuals affected in total.

American Associated Pharmacies, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2024-10-23 and filed notice on 2025-11-12. 1,438 Washington residents were affected. 385 days elapsed between awareness and notification. 10 days to identify the breach. 24 days to contain the breach.

American Associated Pharmacies (AAP) is a member-owned cooperative of over 2,000 independent pharmacies working together as a cohesive network. AAP in partnership with its subsidiaries, Associated Pharmacies, Inc. (API), Arete Pharmacy Network, and AllyScripts, provides the tools and resources needed for members to improve their bottom line and differentiate themselves from competitors. AAP members not only receive savings on brand prescriptions, generic prescriptions and OTC products through the API warehouse and their negotiated prime vendor agreement, but they also receive negotiated competitive managed-care contracts through the Arete Pharmacy Network. In addition to offering solutions such as API and Arete Pharmacy Network, AAP provides members access to a full-service specialty pharmacy, AllyScripts, that allows pharmacies to retain their patients and compete in the growing specialty segment without the costly investment. AAP is able to provide its members with the support and customized solutions they need to succeed in the marketplace. - It seems AAP does not care about their data. AAP has paid 1.3 million for decrypt and owe another 1.3 million for 1.469 TB of their data.