Community Health Center reports data breach exposing 1M patients
Learn More
Community Health Center (CHC), a nonprofit healthcare provider based in Connecticut that serves over 145,000 active patients, is reporting a data breach affecting 1,060,936 individuals.
The incident was discovered on January 2, 2025, though the actual breach occurred in mid-October 2024. The breach occurred when an unauthorized actor, described as a "skilled criminal hacker," gained access to CHC's computer systems.
The organization launched an investigation with cybersecurity experts and implemented enhanced security measures, including the deployment of additional monitoring software. CHC reports that they contained the breach within hours of discovery, and their daily operations remained unaffected.
The investigation confirmed that the attacker successfully exfiltrated sensitive data. The stolen data includes:
- Names
- Dates of birth
- Addresses
- Phone numbers
- Email addresses
- Social Security numbers
- Medical diagnoses
- Treatment details
- Test results
- Health insurance information
The nature of the attack is not disclosed.
Beginning January 30, 2025, CHC started notifying affected individuals via mail about the incident. The company is offiering 24 months of free identity theft protection services through IDX, including credit and CyberScan monitoring, $1,000,000 insurance reimbursement policy and identity recovery assistance.
The deadline for affected individuals to enroll in the IDX protection services is April 30, 2025. Notifications include a QR code for easy activation of these services.
