American Addiction Centers (AAC) has disclosed a data breach that compromised the personal information of 422,424 individuals. The breach, identified on September 26, allowed attackers to access the organization's servers for several days and steal sensitive data, including names, addresses, Social Security numbers, health insurance information, and medical record identifiers. AAC emphasized that treatment information and payment card data were not affected. While no cases of identity theft or fraud have been reported, AAC is offering 12 months of free credit monitoring to those affected. The breach was reported to the US Department of Health and Human Services and the Maine Attorney General's Office, with notification letters sent to impacted individuals starting December 23. Continue here.
