Authentic Recovery Center
Disclosed Aug 17, 20188 years ago1,790 affectedConfirmed
A hacker gained unauthorized access to a workforce member’s email account via a phishing email. The email account contained the protected health information (PHI) of 1,790 individuals and included demographic, financial, and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE performed a risk analysis, enhanced its spam email filtering, and implemented audit logs and alerts for suspicious activity on its electronic network. OCR’s investigation resulted in the CE enhancing its practices for safeguarding PHI.
What is known
| People affected | 1,790 (as reported to HHS) |
|---|---|
| Disclosed | Aug 17, 2018 |
| Happened | Jun 7, 2018 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Authentic Recovery Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Authentic Recovery Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 17, 2018 | |
| HHS archivetotal | Aug 17, 2018 | 1,790 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1790 · backfill source
- 2026-09-25 · summary: empty to A hacker gained unauthorized access to a workforce member’s email account via a phishing email. The email account contained the protected health information (PHI) of 1,790 individuals and included demographic, financial, and clinical inform · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.