American Addiction Centers, Inc. reported a data breach involving unauthorized access to its computer systems in September 2024. California Attorney General records list incident dates of September 23 through September 26, 2024, and show that a breach notice was submitted on December 23, 2024. The Washington Attorney General filing also confirms a regulator-reported incident involving the company.
Approximately 423,064 individuals were included in the affected class identified in later settlement documents. The information potentially involved names, addresses, dates of birth, Social Security numbers, contact information, medical record numbers or identifiers, treatment information, and health insurance information. The sources reviewed do not establish that payment-card, bank-account, or other financial-account information was involved.
The public records reviewed do not provide a separate date for consumer notification or a regulator-notification date other than the December 23, 2024 California filing date. Incident details and notification records may be supplemented as additional regulatory or court documents become available.