American Addiction Centers is notifying more than 422,000 people about a recent data breach that led to the theft of their personal information.
The organization provides treatment services to people who use substances through a network of rehabilitation facilities in many states.
The incident took place in September and the attackers had access to the organization's servers for several days, thus managing to steal data from thousands of people.
In late November, American Addiction Centers notified the U.S. Department of Health and Human Services of a data breach affecting 410,747 people.
See also: Ascension: Data breach affects 5.6 million people
On December 23, however, a notice to the Maine Attorney General's Office, saying that the perpetrators stole the personal information of 422,424 people. The agency also said it had begun sending written letters to all of the individuals affected.
The information that has been compromised includes names, addresses, phone numbers, dates of birth, social security numbers, health insurance information, and medical record numbers or other identifying information.
Individuals' treatment information or payment card data has not been affected
According to American Addiction Centers, people affected by the data breach will receive free notifications of potential changes to their credit records for twelve months.
See also: Rhode Island: Data breach after Brain Cipher ransomware attack
The organization has not shared details about the type of cyberattack, but the Rhysida ransomware claimed responsibility for the incident in mid-November.
The hackers said they stole about 2.8 terabytes of data from the organization, and most of it has been made public, indicating that American Addiction Centers did not pay the ransom.
As technology continues to advance, so do the methods hackers use to gain access to sensitive information. Data breaches have become more common in recent years, with large corporations, government agencies, and even healthcare providers falling victim to cyberattacks.
See also: Texas Tech University Health Sciences Center: 1.4 million patient data breach
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
In addition to financial loss, these breaches can lead to identity theft, damage to the company’s reputation, and legal consequences. It is vital for organizations to prioritize cybersecurity measures and regularly update their systems to stay ahead of potential threats. Regular security audits, encryption practices, and employee training are some effective ways businesses can strengthen their defenses against cyberattacks.
Source: www.securityweek.com
