 [Jonathan Greig](/author/jonathan-greig)December 26th, 2024 Nearly half a million people had data stolen after cyberattack on American Addiction Centers============================================================================================A September ransomware attack on American Addiction Centers exposed the sensitive healthcare information of more than 400,000 people.The company began mailing out [breach notification letters](https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ff8926f7-302d-4cbb-a554-9b03d6b32d03.html) ahead of the Christmas holiday, warning 422,424 people that Social Security numbers and health insurance information were among the data leaked during the attack.The company runs a network of addiction rehab facilities across California, Florida, Texas, Nevada, Massachusetts, Mississippi, New Jersey and Rhode Island.A spokesperson did not respond to requests for comment about whether it was a ransomware attack. The Rhysida ransomware gang — known for several other attacks on healthcare networks in the U.S. — [claimed](https://x.com/FalconFeedsio/status/1857730516360810821) to have attacked American Addiction Centers on November 16.The attack was discovered on September 26 when AAC said it ‘learned it was experiencing a cybersecurity incident.’ After notifying law enforcement and hiring experts, an investigation revealed that the hackers had stolen troves of data between September 23 and 26.A recent review outlined the data stolen from customers, which includes names, addresses, phone numbers, medical record numbers and more. Payment card data and treatment information were not included in the breach.The company also filed breach notices in Texas, where more than 26,000 people were impacted, as well as [California](https://oag.ca.gov/ecrime/databreach/reports/sb24-596615).The Rhysida ransomware has targeted other major healthcare operations in the past, attacking [a large U.S. hospital network](https://therecord.media/prospect-hospitals-still-recovering) last year and in February [shutting down a children’s hospital](https://therecord.media/ransomware-gang-claims-payment-luries) in Chicago.The ransomware-as-a-service operation caused nearly unparalleled damage throughout 2024 with large-scale attacks on the cities of [Seattle](https://therecord.media/seattle-port-rhysida-ransom-refused) and [Columbus, Ohio](https://therecord.media/columbus-ransomware-officials-warn-victims-after-data-leak) that had significant real-world impact. In October the group [tried to extort $1.3 million](https://therecord.media/easterseals-central-illinois-data-breach) from disability nonprofit Easterseals. * [](https://twitter.com/intent/tweet?text=Nearly half a million people had data stolen after cyberattack on American Addiction Centers%20%20@TheRecord_Media)* [](https://www.linkedin.com/shareArticle?mini=true&url=&title=Nearly half a million people had data stolen after cyberattack on American Addiction Centers)* [](https://www.facebook.com/sharer/sharer.php?u=&src=sdkpreparse)* [](https://www.reddit.com/submit?url=)* [](https://news.ycombinator.com/submitlink?u=&t=Nearly half a million people had data stolen after cyberattack on American Addiction Centers)* [](https://bsky.app/intent/compose?text=Nearly half a million people had data stolen after cyberattack on American Addiction Centers ) * [Cybercrime](/news/cybercrime)* [News](/)* [News Briefs](/)* [Privacy](/news/privacy) Get more insights with the Recorded Future Intelligence Cloud.[Learn more.](https://www.recordedfuture.com/platform?mtm_campaign=ad-unit-record) Tags* [medical](/tag/medical)* [data breach](/tag/data-breach) No previous article No new articles  [Jonathan Greig](/author/jonathan-greig) is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic. [](https://twitter.com/jgreigj)
Related Tags:
NAICS: 81 – Other Services (except Public Administration)
NAICS: 62 – Health Care And Social Assistance
NAICS: 623 – Nursing And Residential Care Facilities
NAICS: 518 – Computing Infrastructure Providers
Data Processing
Web Hosting
Related Services
NAICS: 92 – Public Administration
NAICS: 51 – Information
NAICS: 813 – Religious
Grantmaking
Civic
Professional Services
Similar Services
NAICS: 924 – Administration Of Environmental Quality Programs
Blog: The Record
Associated Indicators: