[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1mhjaeaj3qotd":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":21,"affectedCountUnit":22,"hasEnglishDescription":4,"severity":23,"dataClasses":24,"description":34,"seoTitle":35,"seoTitleEn":36,"seoDescription":35,"seoDescriptionEn":37,"logoUrl":38,"isVerified":4,"isSensitive":4,"isSpamList":39,"isMalware":39,"company":40},"6a709b9b8e092a94f2e88206","AmericanAddictionCenters2024","American Addiction Centers 2024 Data Breach","american-addiction-centers-2024","americanaddictioncenters.org","2024-09-23T00:00:00.000Z","2026-08-03T13:46:03.935Z","AAC consumer notice, HHS OCR, independent security reporting, and court-authorized settlement notice","https:\u002F\u002Fagportal-s3bucket.s3.amazonaws.com\u002Fdatabreach\u002FBreachA31768.pdf",[14,16,17,18],"https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf","https:\u002F\u002Fwww.securityweek.com\u002Famerican-addiction-centers-data-breach-impacts-422000-people\u002F","https:\u002F\u002Faacsettlement.com\u002F",422424,"known",null,"people","High",[25,26,27,28,29,30,31,32,33],"Names","Physical addresses","Phone numbers","Dates of birth","Medical record numbers","Other identifiers","Social Security numbers","Health insurance information","Treatment information","\u003Cp>\u003Cstrong>The 2024 American Addiction Centers data breach\u003C\u002Fstrong> involved unauthorized access to the addiction-treatment provider's information systems between September 23 and 26, 2024. A later company filing with state authorities reported that 422,424 people were affected.\u003C\u002Fp>\u003Cp>The event involved patients of American Addiction Centers and affiliated providers including AdCare, the Greenhouse, Desert Hope Center, Oxford Treatment Center, Recovery First, Sunrise House, River Oaks Treatment Center, and Laguna Treatment Hospital.\u003C\u002Fp>\u003Ch2>How did the American Addiction Centers data breach happen?\u003C\u002Fh2>\u003Cp>The company learned of a cybersecurity incident around September 26, engaged outside experts, and notified law enforcement. By October 3, the investigation had determined that an unauthorized party took certain data from its systems between September 23 and 26.\u003C\u002Fp>\u003Cp>American Addiction Centers did not disclose the initial access method or an exploited vulnerability. The Rhysida ransomware group claimed responsibility, but the company notice did not confirm the actor's identity. The event is therefore recorded as confirmed unauthorized access and data acquisition, while the actor attribution remains unverified.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>The individual notice listed names, addresses, phone numbers, dates of birth, medical record numbers or other identifiers, Social Security numbers, and health insurance information. The combination of fields varied by person.\u003C\u002Fp>\u003Cp>The initial notice said treatment information and payment-card data were not involved. A later court-authorized settlement notice included treatment information within its definition of the private information at issue. Recipients should rely on the categories listed in their own notice.\u003C\u002Fp>\u003Ch2>How many people were affected?\u003C\u002Fh2>\u003Cp>An initial report to the U.S. Department of Health and Human Services listed 410,747 patients. The company's later December 23, 2024 filing with the Maine Attorney General reported 422,424 people. These are not separate incidents or totals to add together; the catalog uses the later reported total for the same event.\u003C\u002Fp>\u003Ch2>What risks can this information create?\u003C\u002Fh2>\u003Cp>Social Security numbers combined with dates of birth and addresses can support identity theft or fraudulent account applications. Health-insurance information and medical identifiers can also be used for fraudulent claims, medical identity misuse, and convincing person-specific scams.\u003C\u002Fp>\u003Cp>Health information connected with addiction treatment presents an additional and serious privacy risk. Threatening or extortionate messages that refer to such information should not be answered, and incident support should be reached only through independently verified organization channels.\u003C\u002Fp>\u003Ch2>How did American Addiction Centers respond?\u003C\u002Fh2>\u003Cp>The organization said it contained the attack, worked with law enforcement and external cybersecurity specialists, and implemented additional safeguards. Affected people were offered 12 months of single-bureau credit monitoring, a credit report, a credit score, and proactive fraud assistance.\u003C\u002Fp>\u003Ch2>What should affected people do?\u003C\u002Fh2>\u003Cp>Notice recipients can activate the complimentary monitoring service through the verified instructions in their letter, review credit reports, and consider a credit freeze or fraud alert. Unrecognized financial activity should be reported directly to the relevant institution.\u003C\u002Fp>\u003Cp>Health-insurance explanations, patient portals, and medical bills should be checked for services that were not received. Unexpected links claiming to come from American Addiction Centers, an affiliated treatment center, or the monitoring provider should be avoided until the sender is verified through an independent contact channel.\u003C\u002Fp>","","American Addiction Centers Data Breach (422.4 Thousand People Affected)","The American Addiction Centers data breach affected 422,424 people and involved identity, medical, and health-insurance information.","\u002Fuploads\u002Flogo\u002Famerican-addiction-centers-official.svg",false,{"name":41,"sector":42,"country":43,"website":44,"websiteArchiveUrl":35,"websiteStatus":35,"websiteCheckedAt":21},"American Addiction Centers, Inc.","Healthcare","United States","https:\u002F\u002Famericanaddictioncenters.org\u002F"]