A&A Services dba Sav-Rx

A&A Services dba Sav-Rx notified consumers of a data breach affecting protected health information (PHI) and personal data of employees. The incident involved unauthorized access to non-clinical systems starting October 3, 2023. Data types included PHI, SSNs, and financial account numbers. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring. Rhode Island had 1,006 affected residents.

Affected (this filing): 1,006

A&A Services d/b/a Sav-Rx experienced unauthorized access to its IT systems between October 3 and October 8, 2023. The incident compromised PHI and PII of 5,121 individuals, including 5,121 New Hampshire residents and 1,006 Rhode Island residents. The company engaged cybersecurity experts, restored systems, and provided credit monitoring. Notifications were sent in May 2024.

Affected (this filing): 5,121