Over 1 Million Patients Affected by Community Health Center Data Breach
Community Health Center, a nonprofit healthcare provider in Middletown, Connecticut, has notified more than 1 million individuals about a recent data breach. Unauthorized activity was identified in its computer systems on January 2, 2025, and external cybersecurity experts were engaged to assist with the investigation and determine the nature and scope of the unauthorized activity.
The investigation confirmed that a criminal hacker accessed its computer systems and exfiltrated data from its network. Community Health Center did not confirm whether a ransom demand was issued; however, explained that no data was deleted from its network and files were not encrypted, therefore the incident had no impact on daily operations. Community Health Center explained in the notification to the Maine Attorney General that “We believe we stopped the criminal hacker’s access within hours, and there is no current threat to our systems.” The Maine Attorney General breach notice states that the breach first occurred on October 14, 2024.
The file review has now been completed and Community Health Center has confirmed that the following information may have been exfiltrated: names, addresses, phone numbers, email addresses, dates of birth, diagnoses, test results, treatment information, health insurance information, and Social Security numbers. Up to 1,060,936 individuals have been affected, including pediatric patients and their parents and guardians. Some of the affected patients have deceased, and notifications are being sent to their next of kin. While the majority of affected patients are likely Connecticut residents, the California Attorney General has also been sent a notification about the data breach. At more than 1 million records, this is the largest healthcare data breach reported so far this year. Employees of Moses-Weitzman Health System were also affected.
Community Health Center said security has been strengthened and software implemented to monitor its systems for suspicious activity. While there are currently no indications that any of the stolen data has been misused, Community Health Center has offered the affected individuals complimentary identity theft protection services for 24 months.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
