American Addiction Centers, Inc.
bd_e5a08370b5e33e78 · schema v1 · pii pii-v1
Full breach record for American Addiction Centers, Inc. →5 incidents on fileAmerican Addiction Centers (AAC) notified individuals of a security incident involving a third-party vendor, Salesforce. On June 5, 2026, AAC detected suspicious activity in its Salesforce environment. Investigation revealed that an unauthorized third party accessed the system on May 12, 2026, acquiring names, contact information, Social Security numbers, and brief health descriptions. The incident did not involve AAC's electronic health records. AAC implemented containment measures and additional safeguards, and is offering credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
May 12, 2026
Begins
Jun 5, 2026
Discovered
Aug 7, 2026
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Washington State AGbd_3555da6094fb98d82026-08-07Verified
- New Hampshire State AGbd_5042b16d43008ce42026-08-07Verified
- HHS OCRbd_96fc6e5e60ee8b752026-08-07Verified
- California State AGbd_e643d160bcc6be832026-08-07Verified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- Illinois State AGbd_57bc2a3fe531681e2026-08-01 · +6dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Aug 1 (IL), last Aug 7 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.