American Addiction Centers, Inc.
bd_e643d160bcc6be83 · schema v1 · pii pii-v1
Full breach record for American Addiction Centers, Inc. →5 incidents on fileAmerican Addiction Centers (AAC) notified California residents of a security incident involving a third-party vendor, Salesforce. On June 5, 2026, AAC detected suspicious activity in its Salesforce environment. Investigation revealed that an unauthorized third party accessed the system on May 12, 2026. The breach involved names, contact information, Social Security numbers, and brief health descriptions obtained during initial outreach, not from electronic health records. AAC contained the incident and offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 12, 2026
Begins
Jun 5, 2026
Discovered
Aug 7, 2026
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Washington State AGbd_3555da6094fb98d82026-08-07Verified
- New Hampshire State AGbd_5042b16d43008ce42026-08-07Verified
- HHS OCRbd_96fc6e5e60ee8b752026-08-07Verified
- Massachusetts State AGbd_e5a08370b5e33e782026-08-07Verified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- Illinois State AGbd_57bc2a3fe531681e2026-08-01 · +6dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Aug 1 (IL), last Aug 7 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.