American Addiction Centers, Inc.

American Addiction Centers, Inc. (AAC) notified consumers of a cybersecurity incident occurring between September 23-26, 2024. An unauthorized party accessed systems and exfiltrated data, potentially including names, addresses, health information, and SSNs. AAC engaged third-party experts, notified law enforcement, contained the incident, and offered credit monitoring services.

American Addiction Centers, Inc., a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2024-09-26 and filed notice on 2024-12-20. 2,994 Washington residents were affected. 85 days elapsed between awareness and notification. 3 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 2,994