ACADIA HEALTHCARE COMPANY, INC.
ent_019eb584f9d5b64765270010c0a2614e
Disclosures
2
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
1,807
nationwide · HHS OCR TN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- ACADIA HEALTHCARE COMPANY, INC.
- Normalized
- acadia healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493005CW985Y9D0NC11
- SEC EDGAR CIK
- 0001520697
- Domain
- None on record
Disclosure history (2)newest first
- Massachusetts State AGas victim2026-05-22
Acadia Healthcare Company, Inc. disclosed a data security incident involving unauthorized access to a single email and SharePoint account via social engineering/phishing between March 21 and March 25, 2026. The incident exposed patient names, admission dates, diagnosis codes, and patient status. The company secured the accounts, engaged forensic investigators, and is providing cybersecurity training. No EHR systems were affected.
- TENNESSEEHHS OCRas victim2026-05-22
Acadia Healthcare Company, Inc reported to HHS on 2026-05-22 a Hacking/IT Incident affecting 1807 individuals. Breached information located on Email. Business Associate present: Yes.
Subsidiary disclosures (newest 10)filed by group companies
◈ These filings were made by or about subsidiaries of ACADIA HEALTHCARE COMPANY, INC. — not by ACADIA HEALTHCARE COMPANY, INC. itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- WISCONSINHHS OCRvia Delta Medical Systems, Inc.2026-03-10
Delta Medical Systems (WI), a Business Associate, reported to HHS OCR on 2026-03-10 a Hacking/IT Incident affecting 1,574 individuals. Breached information was located on Email. A business associate was present. No further detail is available from the web description.
- New Hampshire State AGvia Delta Medical Systems, Inc.2026-03-09
Delta Medical Systems notified the NH Attorney General of a data security incident where unauthorized access occurred on July 15, 2025. Approximately 3 New Hampshire residents were affected, with potential exposure of names, dates of birth, Social Security Numbers, and driver's license/state ID numbers. The company engaged cybersecurity experts, secured its systems, and is providing 12 months of credit monitoring via TransUnion to affected individuals.
- Nebraska State AGvia Delta Medical Systems, Inc.2026-03-06
Delta Medical Systems notified the Nebraska Attorney General of a data security incident discovered on July 15, 2025, involving unauthorized access to email environment data. Approximately 3 Nebraska residents were affected, with personal information including SSN, DOB, and driver's license numbers potentially exposed. The company engaged cybersecurity experts, implemented additional safeguards, and offered 12 months of credit monitoring via TransUnion. Notifications were sent in February 2026.
- Indiana State AGvia Delta Medical Systems, Inc.2026-03-06
Delta Medical Systems reported a data breach to the Indiana Attorney General. The breach occurred on 2025-07-15 and was reported on 2026-03-06. 9 Indiana residents were affected. 1,869 individuals affected in total.
- GLOBALLeak Sitevia CRC Group2025-03-16
CRC Group is a wholesale and specialty insurance distributor in the United States. Founded in 1914, th...
- South Carolina State AGvia Aspen Education Group, Inc.2021-05-11
Aspen Education Group, Inc. notified South Carolina residents of a December 13, 2020 incident where an unauthorized person gained access to its network and deployed malware. The incident may have exposed names, addresses, and dates of birth. The company engaged forensic investigators and offered one year of Experian Identity Works. No misuse was indicated.
- New Hampshire State AGvia Aspen Education Group, Inc.2021-05-10
Aspen Education Group, Inc. notified the NH Attorney General of a security incident where an unauthorized person gained access to the network on December 13, 2020, deployed malware, and exfiltrated documents. The breach affected 377 New Hampshire residents, exposing names, dates of birth, and Social Security numbers. The company engaged forensic investigators, secured the network, and offered one year of credit monitoring.
- Maine State AGvia Aspen Education Group, Inc.2021-05-10
Aspen Education Group, Inc. experienced an external system breach (hacking) on December 13, 2020, which was discovered on March 11, 2021. The breach affected 279 Maine residents, compromising their names and Social Security numbers. The company provided one year of credit monitoring and identity theft protection services through Experian.
- Oregon State AGvia Aspen Education Group, Inc.2021-05-10
Aspen Education Group, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2021-05-10. The breach occurred during 12/13/2020 - 12/13/2020. The breach was discovered on 3/11/2021. 57,763 individuals were affected. Notice was sent on 5/10/2021.
- Washington State AGvia Aspen Education Group, Inc.2021-05-10
Aspen Education Group, Inc. notified Washington AG of a Dec 13, 2020 cyberattack where malware was deployed and documents containing PII (names, DOB, SSN, health info) of 1,958 WA residents were accessed. Notifications mailed May 10, 2021, offering 1-year credit monitoring.