422,000+ Impacted in American Addiction Centers Cybersecurity Incident

American Addiction Centers disclosed a September 23–26, 2024 hacking incident that exposed personal and health-related information for 422,424 individuals, including names, addresses, dates of birth, Social Security numbers, and health insurance details. AAC reported no exposure of treatment records or payment card data, stated there was no current evidence of identity theft, launched an investigation with third-party cybersecurity experts, notified law enforcement, and is offering affected individuals 12 months of complimentary credit monitoring and identity protection services.