American Addiction Centers Inc.‘s $2.75 million settlement to resolve data breach claims from plaintiffs who sued the national substance use disorder treatment services provider received preliminary approval from a federal court. The settlement, which will cover about 423,000 people, is set for a final approval hearing April 2026, according to the Dec. 5 order signed by Judge William L. Campbell Jr. of the US District Court for the Middle District of Tennessee.

The Maine Office of the Attorney General reported a data breach involving American Addiction Centers, Inc. on December 23, 2024. The breach, which occurred between September 23 and September 26, 2024, was due to an external system breach (hacking) affecting approximately 422,424 individuals, including 669 residents of Maine. Identity theft protection services were offered through Cyberscout for 12 months.

American Addiction Centers Inc., a national provider of substance use disorder treatment services, faced a significant data breach in 2024 when an unauthorized party infiltrated its internal computer systems. The incident exposed the personal information of approximately 423,000 individuals, prompting the company to notify affected parties. As a result, plaintiffs filed a lawsuit alleging negligence in safeguarding sensitive data, leading to a $2.75 million settlement. Class members—those impacted by the breach—are eligible for reimbursement of up to $5,000 for documented expenses, along with an estimated $50 pro rata cash payment per individual. The breach underscores vulnerabilities in the company’s cybersecurity measures, particularly concerning the protection of highly sensitive health-related and personal data. The financial and reputational fallout, combined with the scale of exposed records, highlights the severe consequences of inadequate data security protocols in sectors handling confidential patient information.