Acadia Health LLC

Acadia Health LLC, a Louisiana-based healthcare provider, experienced a data breach in 2023 that exposed the personal information of nearly 130,000 individuals, including Social Security numbers (SSNs). The breach resulted from alleged negligence in safeguarding sensitive data, leading to a proposed class-action settlement of $875,000. Affected individuals particularly those with exposed SSNs are eligible for reimbursement of up to $10,000 for documented losses, while adult subclass members can claim up to $12,500. Minors impacted by the breach will receive 10 years of identity-theft protection. The settlement also includes pro rata cash payments for other affected parties. The exposure of such highly sensitive data (SSNs) poses severe risks, including identity theft, financial fraud, and long-term reputational harm to the victims. The incident underscores critical failures in Acadia Health’s cybersecurity measures, particularly in protecting patient and employee confidentiality in the healthcare sector.

Source: https://news.bloomberglaw.com/business-and-practice/acadia-healths-875-000-data-breach-settlement-gets-final-nod

TPRM report: https://www.rankiteo.com/company/acadia-healthcare

"id": "aca2502425103025",
"linkid": "acadia-healthcare",
"type": "Breach",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '130,000 individuals',
                        'industry': 'Healthcare',
                        'location': 'Louisiana, USA',
                        'name': 'Acadia Health LLC',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Settlement terms communicated to affected individuals '
                        '(reimbursement, identity-theft protection, cash '
                        'payments)',
 'data_breach': {'number_of_records_exposed': '130,000',
                 'personally_identifiable_information': 'Yes (Social Security '
                                                        'numbers, other '
                                                        'personal data)',
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personal information',
                                              'Social Security numbers']},
 'description': 'Louisiana-based Acadia Health LLC agreed to pay $875,000 to '
                'settle a proposed class action alleging negligence in '
                'protecting the personal information of nearly 130,000 '
                'individuals exposed in a 2023 data breach. Affected '
                'individuals, particularly those with exposed Social Security '
                'numbers, are eligible for reimbursement (up to $10,000 for '
                'documented losses, $12,500 for adult subclass members) and '
                'minors receive 10 years of identity-theft protection. Pro '
                'rata cash payments are also an option.',
 'impact': {'brand_reputation_impact': 'Negative (settlement implies '
                                       'reputational damage)',
            'customer_complaints': 'Class action lawsuit filed',
            'data_compromised': 'Personal information (including Social '
                                'Security numbers)',
            'financial_loss': '$875,000 (settlement amount)',
            'identity_theft_risk': 'High (Social Security numbers exposed; '
                                   'minors receive 10 years of identity-theft '
                                   'protection)',
            'legal_liabilities': '$875,000 settlement for negligence claims'},
 'references': [{'source': 'Class action lawsuit settlement details '
                           '(plaintiffs’ motion for final approval)'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled for '
                                            '$875,000'},
 'response': {'communication_strategy': 'Settlement agreement with class '
                                        'action plaintiffs (reimbursement, '
                                        'identity-theft protection, and pro '
                                        'rata cash payments offered)'},
 'title': 'Acadia Health LLC Data Breach (2023)',
 'type': 'Data Breach'}