Recently, reports began to emerge about a possible American Clinical Solutions, LLC (“ACS”) data breach. While ACS has not yet acknowledged a cyberattack or a subsequent data breach, hackers claim to have obtained consumers’ sensitive information, which includes their names, Social Security numbers, dates of birth, genders, patient ID numbers, laboratory results, policy numbers, insurance data, and phone numbers. If, after completing its investigation, ACS confirms that patient data was leaked, it will begin sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you receive a data breach notification from American Clinical Solutions, LLC, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following a possible American Clinical Solutions data breach. For more information, please see our recent piece on the topic here.

Was There an American Clinical Solutions Data Breach?

It’s too early to tell if there was an American Clinical Solutions data breach, as the company has not yet confirmed it was the victim of a recent cyberattack. Various news sources have covered the potential breach. According to these sources, hackers claim to have accessed the computer network of ACS, obtaining over 700GB of data.

While ACS has not yet confirmed that it fell victim to a cyberattack or a subsequent data breach, the hackers added ACS to its leak site. In this listing, the ransomware group claims that the exfiltrated data consists of more than 400,000 medical records of patients who had testing performed at ACS facilities.

SuspectFile was able to review the data allegedly stolen from the ACS systems, noting that it included patients’ names, Social Security numbers, dates of birth, genders, patient ID numbers, laboratory results, policy numbers, insurance data, and phone numbers.

The hackers gave ACS up to May 25, 2024, to pay the ransom before leaking the data. It is unclear whether ACS paid the ransom or engaged with the hackers at all, as ACS has not made any public statements about the breach. However, ultimately, ACS will need to investigate the hackers’ claims. And, if ACS confirms that there was a data breach, ACS will be required to send out data breach letters to anyone who was affected by the recent data security incident. If necessary, these letters will provide victims with a list of what information belonging to them was compromised.

More Information About American Clinical Solutions, LLC

Founded in 2008, American Clinical Solutions, LLC is a healthcare services company based in Sun City, Florida. ACS provides a wide range of testing services for both prescription and illicit narcotics. ACS conducts urine testing as well as oral fluid testing and is capable of creating customizable testing options based on the needs of its clients. American Clinical Solutions employs more than 125 people and generates approximately $20 million in annual revenue.