Data Breach: 1 Million+ Patient Records Stolen from US Nonprofit Healthcare Provider

Data Breach Affects Over a Million Patients at Community Health Center

Community Health Center (CHC), a nonprofit healthcare organization located in Connecticut, has recently reported a significant data security incident.

The organization confirmed that unauthorized access to the sensitive information of over one million patients occurred.

Details of the Security Incident

CHC discovered unusual activity within its network on January 2nd. An investigation revealed a “skilled criminal hacker” had successfully infiltrated the system.

The breach, which occurred on October 14, 2024, resulted in the theft of protected health information and personally identifiable information.

This information was reported to Maine’s attorney general in a recent filing.

Types of Compromised Data

The data potentially accessed by the hacker is extensive and may include:

• Patients’ addresses
• Phone numbers
• Diagnoses
• Treatment details
• Test results
• Social Security numbers
• Health insurance information

CHC serves over 100,000 Connecticut residents, offering services such as school-based healthcare and substance abuse treatment programs.

Impact and Response

Fortunately, the hacker did not appear to delete or encrypt any data during the intrusion.

CHC has stated that the incident has not disrupted its ongoing daily operations.

As of now, no prominent cybercriminal group has taken responsibility for the cyberattack.

The organization is continuing to investigate the incident and implement measures to enhance its security posture.