Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

A&A Services

Disclosed May 24, 20242,812,336 affectedConfirmed

Official notice

What is known

People affected2,812,336 (as reported to HHS)
DisclosedMay 24, 2024
DiscoveredApr 30, 2024
HappenedOct 8, 2023
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: A&A Services
Official noticeatg.wa.gov
Washington Attorney General breach notice: A&A Services
Official noticejustice.oregon.gov
Oregon DOJ breach notice: A&A Services
Official noticeago.vermont.gov
Vermont Attorney General: 2024-05-24 A&A Services dba Sav-Rx Data Breach Notice to Consumers
Official noticeago.vermont.gov
Vermont Attorney General: 2024-05-24 A&A Services dba Sav-Rx Data Breach Notice to Consumers
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): A&A Services (Business Associate, NE)

Notices filed

Residents of CAMay 24, 2024
California AGCount not stated
Residents of WAMay 24, 2024
Washington AG69,051 people
Residents of ORMay 24, 2024
Oregon DOJ2,812,336 people
Residents of VTMay 24, 2024
Vermont AGCount not stated
Residents of VTMay 24, 2024
Vermont AGCount not stated
TotalMay 24, 2024
HHS archive2,812,336 people
History of this record
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 2812336by backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2024-05-24-aa-services-dba-sav-rx-data-breach-notice-consumers-0by backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2024-05-24-aa-services-dba-sav-rx-data-breach-notice-consumersby backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to hackingby backfillSource
discovered2026-09-25
empty to 2024-04-30by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about A&A Services