American Addiction Centers data breach

Clerk's notes

American Addiction Centers filed a report with the Oregon Attorney General on September 3, 2026, confirming a data security incident that occurred on June 5, 2026. This breach involves a prominent provider of substance use disorder treatment services, and its status is currently listed as 'monitoring' by regulatory authorities.

The compromised information includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. Given the nature of American Addiction Centers' services, this data is particularly sensitive, revealing deeply personal health details.

The exposure of these specific data categories carries significant risks for affected individuals. Malicious actors could use Full Name, Date of Birth, and Social Security Number for identity theft or to open fraudulent accounts. The compromise of Medical Record Numbers, Health Insurance ID Numbers, and clinical details like Diagnosis and Treatment Information and Prescription Information could lead to medical identity theft, fraudulent billing for services, or even social stigma due due to the sensitive nature of addiction and behavioral health records.

As a healthcare provider, American Addiction Centers is legally obligated under federal laws like HIPAA and HITECH, as well as Oregon state statutes, to protect patient data with robust security measures. The occurrence of this breach suggests potential deficiencies in the administrative, physical, or technical safeguards that were meant to secure this sensitive information.

If you received a data breach notification letter from American Addiction Centers, it indicates that your personal and health information was involved in this security incident. This notice establishes your standing to seek legal recourse. Understanding your rights and available options is crucial, and you may be eligible to request a free review of your case.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.