American Associated Pharmacies
ent_88ef2740e17ac967c3d92674
Disclosures
10
State AG · Leak Site · 10 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
8,042
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- American Associated Pharmacies
- Normalized
- american associated pharmacies— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (10)newest first
- New Hampshire State AGas victim2025-11-17
American Associated Pharmacies notified the New Hampshire Attorney General on November 17, 2025, regarding a cybersecurity incident detected on October 23, 2024. The incident involved unauthorized access starting October 13, 2024, resulting in system encryption (ransomware) and data exfiltration. 11 New Hampshire residents were affected, with their names potentially exposed. The company engaged forensic investigators, law enforcement, and offered 12 months of credit monitoring.
- California State AGas victim2025-11-12
American Associated Pharmacies experienced a ransomware incident in October 2024. Unauthorized access began on October 13, 2024, and was detected on October 23, 2024, when suspicious activity including system encryption was observed. The attacker exfiltrated data, potentially impacting names and other personal information. The company contained the incident, engaged forensic experts, notified law enforcement, and is offering credit monitoring to affected individuals.
- Maine State AGas victim2025-11-12
American Associated Pharmacies experienced a ransomware incident in October 2024. Unauthorized access occurred on October 13, 2024, and was detected on October 23, 2024. The attacker encrypted systems and exfiltrated personal information (names and other identifiers) from approximately 8,042 individuals, including 25 Maine residents. The company engaged law enforcement and forensic experts, reset passwords, and offered 12 months of credit monitoring.
- Vermont State AGas victim2025-11-12
American Associated Pharmacies (AAP) disclosed a ransomware incident detected on October 23, 2024, with initial access occurring October 13, 2024. The attacker encrypted systems and exfiltrated data, potentially including names and addresses. AAP proactively shut down systems, reset passwords, engaged forensic experts, and notified law enforcement. AAP is offering credit monitoring services to affected individuals.
- Montana State AGas victim2025-11-12
American Associated Pharmacies (AAP) disclosed a ransomware incident in October 2024. An unauthorized actor gained access on Oct 13, 2024, and was detected on Oct 23. Systems were encrypted and data exfiltrated. AAP notified law enforcement, engaged forensic experts, and sent consumer notifications on Nov 11, 2025, offering credit monitoring.
- Nebraska State AGas victim2025-11-12
American Associated Pharmacies (AAP) disclosed a ransomware incident in a November 11, 2025 Nebraska Attorney General notification. Unauthorized access occurred on October 13, 2024, and was detected on October 23, 2024. The actor encrypted systems and exfiltrated personal information, including names. AAP engaged law enforcement and forensic experts, reset passwords, and implemented MFA. Free credit monitoring is offered.
- Indiana State AGas victim2025-11-12
American Associated Pharmacies reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-13 and was reported on 2025-11-12. 28 Indiana residents were affected. 8,042 individuals affected in total.
- Washington State AGas victim2025-11-12
American Associated Pharmacies (AAP) notified Washington AG of a ransomware incident affecting 1,438 WA residents. Unauthorized access occurred Oct 13, 2024; detected Oct 23, 2024. Data exposed included PHI, SSNs, driver's licenses, and financial data. Notices sent Nov 12, 2025.
- Massachusetts State AGas victim2024-12-23
American Associated Pharmacies reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-23. 1 Massachusetts residents were affected.
- GLOBALLeak Siteas victim2024-11-12
American Associated Pharmacies (AAP) is a member-owned cooperative of over 2,000 independent pharmacies working together as a cohesive network. AAP in partnership with its subsidiaries, Associated Pharmacies, Inc. (API), Arete Pharmacy Network, and AllyScripts, provides the tools and resources needed for members to improve their bottom line and differentiate themselves from competitors. AAP members not only receive savings on brand prescriptions, generic prescriptions and OTC products through the API warehouse and their negotiated prime vendor agreement, but they also receive negotiated competitive managed-care contracts through the Arete Pharmacy Network. In addition to offering solutions such as API and Arete Pharmacy Network, AAP provides members access to a full-service specialty pharmacy, AllyScripts, that allows pharmacies to retain their patients and compete in the growing specialty segment without the costly investment. AAP is able to provide its members with the support and customized solutions they need to succeed in the marketplace. - It seems AAP does not care about their data. AAP has paid 1.3 million for decrypt and owe another 1.3 million for 1.469 TB of their data.