Incident

American Clinical Solutions reports data breach, exposing 300k people


Learn More

American Clinical Solutions (ACS) is reporting a data breach caused by a ransomware attack. Based in Sun City, Florida, ACS specializes in healthcare testing services, including urine and oral fluid testing for both prescription and illicit drugs.

In May 2024, ACS became a target of a ransomware attack. A well-known hacker group claimed responsibility, listing ACS as a victim and alleging they had exfiltrated medical records of over 400,000 patients who underwent testing at ACS facilities. As typical in ransomware scenarios, the attackers set a deadline for payment (May 25, 2024) to avoid the stolen data being published on the dark web. It remains unclear whether ACS met the ransom demands.

The compromised information is expected to be detailed in forthcoming notification letters to the affected individuals, though the exact data types exposed have not yet been specified by ACS.

This breach exposed sensitive information belonging to approximately 300,000 individuals. The exact types of exposed data have not been confirmed as of this notice. Further details will likely be disclosed in the notification letters sent to those impacted by the breach.

American Clinical Solutions reports data breach, exposing 300k people