HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
American Addiction Centers, Inc.
bd_9c951622ce1ae877 · schema v1 · pii pii-v1
Full breach record for American Addiction Centers, Inc. →American Addiction Centers, Inc. (Brentwood, TN) suffered an external system breach (hacking) between September 23–26, 2024. The breach was discovered on November 22, 2024. A total of 422,424 individuals were affected nationwide, including 669 Maine residents. Affected data types include PII and potentially PHI given the healthcare context. Written notification was sent on December 23, 2024. Identity monitoring through TransUnion/CyberScout was offered for 12 months.
Maine clockDiscovered Nov 22, 2024 → Filed with AG Dec 23, 202431d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 88 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_824b9fda62106035Leak Siterhysidafiled 2024-11-16(37d gap)Verified
- bd_368ecb5209c5fca1Leak Siterhysidafiled 2024-09-26(88d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_f2aef419fe563786New Hampshire State AGfiled 2024-12-23Verified
- bd_10443d8cd56b6545HHS OCRfiled 2024-11-25(28d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ff8926f7-302d-4cbb-a554-9b03d6b32d03.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2024
- Raw hash
- 25c59fdf0f9e09f9e7e9784556e08abbfea2aac55d6fa05519ce2e6208c79f46
Reporting entity
- Name
- American Addiction Centers, Inc.norm: american addiction centers
- Domain
- americanaddictioncenters.org
- Industry
- Healthcare
Victim entity
- Name
- American Addiction Centers, Inc.norm: american addiction centers
- Domain
- americanaddictioncenters.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Nov 22, 2024
- Materiality determined
- —
- Notification sent
- Dec 23, 2024
- Affected individuals
- 669
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 22, 2024→ Filed with AG: Dec 23, 202431d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.