Cybersecurity Breach at American Addiction Centers: Nearly 500,000 Individuals Affected

Cyberattack Exposes Sensitive Data of Nearly Half a Million at American Addiction Centers

In a significant breach of security, American Addiction Centers (AAC) has revealed that a cyberattack in September 2024 compromised the personal and health-related information of approximately 422,424 individuals. The attack, which occurred between September 23 and September 26, exposed sensitive data including names, addresses, Social Security numbers, and health insurance details.

As the holiday season approached, AAC began notifying affected individuals with letters detailing the breach, which were sent just before Christmas. The company confirmed that while the attack was classified as a hacking incident, there is currently no evidence linking the exposed data to identity theft or fraud.

Upon discovering the breach on September 26, AAC promptly initiated an investigation, engaged third-party cybersecurity experts, and notified law enforcement. By October 3, the investigation confirmed that unauthorized individuals had accessed and stolen data during the specified timeframe.

In response to the breach, AAC has implemented enhanced security measures and is working closely with cybersecurity professionals to fortify its systems. The company has also offered complimentary credit monitoring services for 12 months to those affected, aiming to mitigate the risk of identity theft.

AAC reassured individuals that treatment information and payment card data remained secure. The company emphasized its commitment to transparency, providing a dedicated hotline for inquiries and support.

As the investigation continues, AAC urges those impacted to remain vigilant, monitor their financial accounts, and take advantage of the identity protection services offered. For further assistance, individuals can contact AAC’s dedicated call center at 1-833-833-2770.