American Addiction Centers Data Breach: Social Security Numbers Exposed
American Addiction Centers disclosed a data breach that exposed names, Social Security numbers, addresses, and medical information. If you received a notice, here's what it means — and what you can do.
What information was exposed
Per the company's filing — only the items below were involved. We don't pad the list.
Why a name + SSN exposure is serious
Of all the data types that get exposed in a breach, the combination of a full name and Social Security number is among the most damaging. Unlike a credit card number, which a bank can cancel and reissue in a day, your SSN is effectively permanent — you can't change it without an arduous government process, and even then your old number doesn't disappear.
With a name and SSN, someone can attempt to open credit lines in your name, file a fraudulent tax return to claim your refund, apply for government benefits, or pass an employment background check as you. These harms can surface months or years after the breach, which is part of why courts increasingly take SSN exposure seriously even before any misuse is proven.
Notably, the filing indicates the breach occurred in May 2026 but affected individuals weren't notified until roughly August 2026 — a gap of 3 months — a gap during which the exposed data could have circulated.
What affected individuals can do right now
Regardless of any legal action, if you received a notice there are protective steps worth taking:
- Place a free fraud alert or credit freeze with the three credit bureaus — a freeze is free and stops new accounts being opened in your name.
- Enroll in the credit monitoring American Addiction Centers offered — the filing notes identity-theft protection services were provided. It costs you nothing and is worth taking.
- Watch for tax-season fraud — consider an IRS Identity Protection PIN, since SSN exposure is commonly used for fraudulent returns.
- Request a copy of your medical records and review for entries you don't recognize — medical identity theft can contaminate your file.
- Keep the notice letter. It's proof you were among those affected, which matters for any claim.
Timeline
Hosted copy of the notice filed with California Attorney General (original PDF).
Were you affected by the American Addiction Centers breach?
A class-action investigation is underway. If you received a notice, you may be eligible for compensation. Checking takes about two minutes.
Your information is kept private and used only to evaluate your claim.
Common questions
Is the American Addiction Centers data breach a confirmed lawsuit?
An investigation into a potential class action is underway. Whether a suit is ultimately filed depends on the facts and on counsel's assessment. Signing up registers your interest and lets attorneys evaluate eligibility — it is not itself a lawsuit.
Does it cost anything to join?
Class action representation in cases like this is typically handled on a contingency basis, meaning no upfront cost to you. Always confirm terms directly with the representing attorneys.
What if I'm not sure I was affected?
If you received a notification letter from American Addiction Centers, you were among those identified as affected. If you're unsure, the letter is the definitive indicator.