American Associated Pharmacies (AAP), a Scottsboro, Ala.-based pharmacy network overseeing over 2,000 independent pharmacies, suffered a ransomware attack by the Embargo group. Hackers stole 1.4 TB of data, including protected health information (PHI) and clinical laboratory testing records, encrypting files and demanding $1.3 million for decryption. AAP reportedly paid the initial ransom, but Embargo later demanded an additional $1.3 million to prevent data leakage. The attack disrupted API Warehouse operations, forcing password resets for APIRx.com and RxAAP.com. The breach exposed thousands of patients’ medical and account details, with potential long-term risks of identity theft and fraud. The incident follows similar attacks on Memorial Hospital (Georgia) and Weiser Memorial Hospital (Idaho), highlighting Embargo’s sophisticated EDR-killer toolkit and double-extortion tactics (encryption + data leak threats).

American Associated Pharmacies (AAP), a cooperative supporting over 2,000 independent U.S. pharmacies, suffered a data breach in October 2024. Hackers infiltrated AAP’s network on October 13, 2024, exfiltrating sensitive personal and financial data before encrypting files. The compromised information includes names, addresses, dates of birth, Social Security numbers, passport/driver’s license details, bank/routing numbers, medical records (treatment data, prescriptions, insurance info), and credentials (usernames/passwords). The breach poses severe risks of identity theft, financial fraud, and medical data exploitation, affecting customers, employees, and affiliated pharmacies. AAP secured its systems upon detection (October 23, 2024) and launched an investigation, while law firm Edelson Lechtzin LLP is pursuing a class-action lawsuit for victims. The incident underscores critical vulnerabilities in handling highly regulated health and financial data, with potential long-term reputational and operational damage to AAP and its pharmacy network.