Did American Addiction Centers have a data breach?

In plain terms

American Addiction Centers filed a report with the Oregon Attorney General on September 3, 2026, detailing a data security incident that occurred on June 5, 2026. This breach involved the exposure of sensitive personal and health information. Individuals affected by this incident may face risks related to identity theft and medical fraud.

American Addiction Centers, a provider of substance use disorder treatment, notified the Oregon Attorney General's office about a data breach. The incident, which was reported on September 3, 2026, originated from an event occurring on June 5, 2026. The company is currently monitoring the situation following the disclosure.

The types of data reported as compromised in this breach include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information.

Such sensitive data, particularly health and financial details, can be misused for various fraudulent activities. Exposed personal identifiers like Social Security Numbers and dates of birth raise the risk of identity theft. Medical and health insurance information could be exploited for fraudulent billing or to obtain unauthorized medical services.

Individuals who receive a notification letter from American Addiction Centers should consider several protective steps. It is advisable to review financial and medical statements carefully for any unusual or unauthorized activity. Placing a fraud alert or security freeze on credit reports with major credit bureaus can help prevent new accounts from being opened in your name. Additionally, changing passwords for online accounts, especially those connected to healthcare or financial services, is a recommended precaution.