ACADIA HEALTHCARE COMPANY, INC.

Acadia Healthcare Company, Inc. disclosed a data security incident involving unauthorized access to a single email and SharePoint account via social engineering/phishing between March 21 and March 25, 2026. The incident exposed patient names, admission dates, diagnosis codes, and patient status. The company secured the accounts, engaged forensic investigators, and is providing cybersecurity training. No EHR systems were affected.