Clustered 5 filings across 4 jurisdictions · filing window Sep 26, 2024 → Dec 23, 2024. View entity profile → Other incidents for this victim →
incident inc_321b336fea074b62 · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
PII · PHI
ME NH TN
Leak Site · HHS OCR · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Sep 23, 2024 → Sep 26, 2024
When the intrusion reportedly occurred, per the linked filings
Sep 26, 2024
Reported by NEW HAMPSHIRE AG filing
American Addiction Centers American Addiction Centers was founded in 2007. Since that time, we have grown into the largest network of rehab facilities nationwide, with programs in California, Florida, Texas, Nevada, Massachusetts, Mississippi, New Jersey, and Rhode Island.
American Addiction Centers American Addiction Centers was founded in 2007. Since that time, we have grown into the largest network of rehab facilities nationwide, with programs in California, Florida, Texas, Nevada, Massachusetts, Mississippi, New Jersey, and Rhode Island.
Nov 22, 2024
Reported by MAINE AG filing
American Addiction Centers, Inc. reported to HHS on 2024-11-25 a Hacking/IT Incident affecting 410747 individuals. Breached information located on Network Server. Business Associate present.
Affected (this filing): 410,747
American Addiction Centers, Inc. (Brentwood, TN) suffered an external system breach (hacking) between September 23–26, 2024. The breach was discovered on November 22, 2024. A total of 422,424 individuals were affected nationwide, including 669 Maine residents. Affected data types include PII and potentially PHI given the healthcare context. Written notification was sent on December 23, 2024. Identity monitoring through TransUnion/CyberScout was offered for 12 months.
American Addiction Centers, Inc. (AAC) notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 3,422 NH residents. Unauthorized access occurred between Sept 23-26, 2024. AAC engaged third-party experts, contained the incident, and notified law enforcement. Personal information including names and SSNs was accessed. AAC offered credit monitoring and implemented additional security protocols.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Affected (this filing): 669
Affected (this filing): 3,422