DisclosureLens
UnknownHealthcareHealthcareCustomer Data InvolvedFinancial accountHealth (basic)Identity (basic)Government IDMediumContained

Community Connections

bd_8ba09a7d74e4806d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 16, 2026

To disclose

—

Affected

3state residents only

Linked

5 filings

Confidence

67%
Full breach record for Community Connections →2 incidents on file

Community Connections, a healthcare provider, issued a data breach notice dated June 3, 2026, regarding unauthorized access to patient information. The incident involved potential exposure of personal and government-issued identifiers (PII/identity_government). The organization responded by changing passwords, implementing technical safeguards, and offering 24 months of free credit monitoring and fraud assistance via Cyberscout. No evidence of misuse was found, but notification was sent out of an abundance of caution to current and former patients across multiple states.

Leak gap clock⏱ Leak >30d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jun 16, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident
A leak claim by inc_ransom about this victim was first seen 73 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
HHS OCRMay 18 · first
New Hampshire State AG+14d
Indiana State AG+16d
Maine State AG+17d
Massachusetts State AG+29d · this page

Pattern: first filing May 18 (DC), last Jun 16 (MA) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.