American Addiction Centers, Inc.

American Addiction Centers reported a data breach to the Oregon Attorney General. The breach was reported on 2026-09-03. The breach occurred during 6/5/2026 - 6/8/2026. The breach was discovered on 5/12/2026. 1 individuals were affected. Notice was sent on 8/7/2026.

American Addiction Centers (AAC) disclosed a breach involving unauthorized access to its Salesforce environment. An unauthorized third party accessed data from May 12, 2026, to June 5, 2026, when suspicious activity was detected. Approximately 1,155 Washington residents were affected, with data including names, contact info, and for a small subset, SSNs and health insurance details. AAC notified individuals on August 7, 2026, offering credit monitoring.

American Addiction Centers (AAC) notified the NH Attorney General of a security incident involving its Salesforce instance, a third-party business associate. On June 5, 2026, AAC detected suspicious activity and contained it. Investigation revealed an unauthorized third party accessed data on May 12, 2026. The breach affected approximately one New Hampshire resident, exposing name, contact info, SSN, and brief health descriptions. AAC notified the individual on August 7, 2026, and offered credit monitoring.

American Addiction Centers reported to HHS on 2026-08-07 a Hacking/IT Incident affecting 327754 individuals. Breached information located on Network Server.

American Addiction Centers (AAC) notified individuals of a security incident involving a third-party vendor, Salesforce. On June 5, 2026, AAC detected suspicious activity in its Salesforce environment. Investigation revealed that an unauthorized third party accessed the system on May 12, 2026, acquiring names, contact information, Social Security numbers, and brief health descriptions. The incident did not involve AAC's electronic health records. AAC implemented containment measures and additional safeguards, and is offering credit monitoring services.

American Addiction Centers (AAC) notified California residents of a security incident involving a third-party vendor, Salesforce. On June 5, 2026, AAC detected suspicious activity in its Salesforce environment. Investigation revealed that an unauthorized third party accessed the system on May 12, 2026. The breach involved names, contact information, Social Security numbers, and brief health descriptions obtained during initial outreach, not from electronic health records. AAC contained the incident and offered credit monitoring.

AMERICAN ADDICTION CENTERS filed a data-breach notice with the Illinois Attorney General in August 2026 (case 26-08-1381). The register records the breach as discovered on June 8, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

American Addiction Centers, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-24. 115,846 Massachusetts residents were affected.

American Addiction Centers, Inc. reported a data breach to the California Attorney General. Unauthorized access occurred between September 23 and September 26, 2024. The incident potentially exposed personal information including names, addresses, Social Security numbers, and health information. The company offered credit monitoring services to affected individuals. The specific method of unauthorized access was not disclosed in the provided notice.

American Addiction Centers Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-09-23 and was reported on 2024-12-23. 3,433 Indiana residents were affected. 422,424 individuals affected in total.

American Addiction Centers, Inc. reported an external system breach (hacking) occurring between September 23-26, 2024, discovered on November 22, 2024. The incident affected 422,424 individuals nationwide, including 669 Maine residents. Personal identifiers were compromised. The company provided 12 months of identity theft protection services through Transunion/CyberScout to affected individuals.

American Addiction Centers, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-12-23. The breach occurred during 9/23/2024 - 9/26/2024. The breach was discovered on 11/22/2024. 422,424 individuals were affected. Notice was sent on 11/25/202412/23/2024.

American Addiction Centers, Inc. (AAC) notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 3,422 NH residents. Unauthorized access occurred between Sept 23-26, 2024. AAC engaged third-party experts, contained the incident, and notified law enforcement. Personal information including names and SSNs was accessed. AAC offered credit monitoring and implemented additional security protocols.

American Addiction Centers, Inc. issued a consumer notification letter filed with the Montana DOJ regarding a cybersecurity incident. The letter offers complimentary credit monitoring services to affected individuals and provides general identity theft protection information. No specific data types, dates, or affected counts are detailed in the provided text.

American Addiction Centers, Inc. reported unauthorized access to its systems in Washington state between Sept 23-26, 2024. The incident affected 2,994 Washington residents, exposing personal information including names and government IDs. The company offered credit monitoring services to affected individuals.

American Addiction Centers, Inc. (AAC) notified consumers of a cybersecurity incident occurring between September 23-26, 2024. An unauthorized party accessed systems and exfiltrated data, potentially including names, addresses, health information, and SSNs. AAC engaged third-party experts, notified law enforcement, contained the incident, and offered credit monitoring services.

AMERICAN ADDICTION CENTERS, INC filed a data-breach notice with the Illinois Attorney General in December 2024 (case 24-12-003). The register records the breach as discovered on September 23, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

American Addiction Centers, Inc. reported to HHS on 2024-11-25 a Hacking/IT Incident affecting 410747 individuals. Breached information located on Network Server. Business Associate present.

American Addiction Centers American Addiction Centers was founded in 2007. Since that time, we have grown into the largest network of rehab facilities nationwide, with programs in California, Florida, Texas, Nevada, Massachusetts, Mississippi, New Jersey, and Rhode Island.

American Addiction Centers (AAC) notified the New Hampshire Attorney General of a data security incident discovered on September 4, 2020. An employee accessed patient databases without authorization and was terminated. Approximately one New Hampshire resident was affected. Data potentially accessed included names, SSNs, DOB, medical records, and driver's license numbers. AAC offered 12 months of credit monitoring via Experian.

American Addiction Centers reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-18. 5 Massachusetts residents were affected. The report records the breach type as electronic.

American Addiction Centers reported a data breach to the Indiana Attorney General. The breach occurred on 2020-08-01 and was reported on 2020-11-09. 4 Indiana residents were affected. 328 individuals affected in total.

American Addiction Centers (AAC) notified the New Hampshire Attorney General on November 9, 2020, of a data security incident discovered on September 4, 2020. An employee accessed patient databases without authorization and was terminated. Approximately one New Hampshire resident was affected. Data potentially accessed included names, SSNs, DOB, driver's license numbers, and medical records. AAC offered 12 months of credit monitoring via Experian.

American Addiction Centers notified Montana residents of a data security incident discovered on September 4, 2020, where an employee accessed patient databases without authorization. The employee was terminated. Affected data included names, SSNs, DOBs, and medical records. The company offered one year of Experian IdentityWorks protection.