American Addiction Centers reports massive data breach affecting 410,747 individuals
A Business Associate serving addiction treatment providers, American Addiction Centers, Inc., filed a report with HHS OCR on November 25, 2024, disclosing a hacking/IT incident. The breach impacted 410,747 individuals, with protected health information accessed from a network server. Because American Addiction Centers acts as a Business Associate, the covered entities it serves—such as clinics and hospitals—may also have notification obligations to their own patients. Healthcare administrators should verify if their organization uses this vendor and review internal breach response protocols. This filing date reflects when the report was submitted to the government, not necessarily when the incident occurred or was discovered.
Sources differ:
- The HHS OCR breach portal lists 410,747 individuals; a later filing with the Maine Attorney General, as reported by SecurityWeek, lists 422,424.
Primary source: HHS OCR Breach Portal — American Addiction Centers, Inc. (TN) · reported 11/25/2024 · 410,747 individuals · Checked against the record 2026-10-19