ENKR

American Addiction Centers Salesforce data theft

Add to my breach check

Made public · 327,754 people

What leaked4

Hard to replace

  • Other profile data

Permanent

  • Health information
  • Social Security number
  • Full name
  • Health informationa brief description of their health that people gave at first contact
  • Other profile datacontact information · types not stated

To-dos

None of the harms this check covers.

What happened next5 events

  1. Undetected 2 events24 days · show events
  2. Response 3 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Breach report to the Washington attorney general: 1,155 Washington residents
  2. Breach report to HHS: 327,754 people · press
  3. Found that an unauthorised third party took data from its Salesforce instance on 12 May 2026
  4. Learned of suspicious activity in its Salesforce environment
  5. Intrusion began
Company
American Addiction Centers
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
327,754 people · AAC's report to HHS, as HIPAA Journal lists it

Sources