HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Community Health Northwest Florida (CHNWFL)

bd_b547c9302d84cc28 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 24, 2024

Filed

Jan 26, 2026

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Community Health Northwest Florida (CHNWFL) →

Community Health Northwest Florida notified Nebraska AG of a cybersecurity event discovered on December 24, 2024, where an unauthorized party accessed network files. The breach potentially exposed names and government identifiers (SSN, DOB, driver's license). The organization engaged forensic specialists, secured systems, and provided 12 months of credit monitoring via Cyberscout/TransUnion. Notification letters were dated January 26, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 24, 2024

Discovered

Jan 26, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Community Health Northwest Florida (CHNWFL)
norm: community health northwest florida chnwfl

Name: Community Health Northwest Florida (CHNWFL)
norm: community health northwest florida chnwfl
Industry: Healthcarellm

Discovered: Dec 24, 2024
Materiality determined: —
Notification sent: Jan 26, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Engaged third-party cybersecurity specialists to assist with our response and to conduct a comprehensive forensic investigation
Secured our network
Notified potentially affected individuals
Changes made: Remediated all impacted systems
Implementing additional technical safeguards
Enhanced security measures
Updated policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/87a7d096-1be0-48a2-b3b5-8b12e12ffe5b.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2026
Raw hash: 24158dec50d37ee59278f364e699634c36bed4cf62a371f0d2027606a0322510

Reporting entityCommunity Health Northwest Florida (CHNWFL)

Victim entityCommunity Health Northwest Florida (CHNWFL)

Incidentdiscovered Dec 24, 2024

Stated responseEngaged third-party cybersecurity specialists to assist with our response and to conduct a comprehensive forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov