Cyber incident disrupts American Associated Pharmacies ordering functions

American Associated Pharmacies detected suspicious activity consistent with a cybersecurity incident on 23 October 2024; subsequent regulatory reporting identifies 13 October as the breach date. During the response, AAP reset credentials and its API Warehouse ordering capability was reduced, with the company later reporting that only limited ordering capabilities had been restored. Embargo claimed ransomware, encryption and data theft, but AAP did not publicly confirm the ransomware attribution, so the mechanism is not classified as ransomware here.