COMMUNITY HEALTH NETWORK, INC.

Community Health Network, Inc. notified the NH Attorney General of unauthorized access to an employee email account between Feb 25-26, 2025. The incident potentially impacted PHI of 2 NH residents, including names, DOBs, and treatment details. Notification to residents began Sept 12, 2025.

Community Health Network, Inc. experienced unauthorized access to one employee email account Feb 25-26, 2025, discovered July 15, 2025. PHI affected: names, DOB, medical info, health insurance info. ~13,939 Indiana residents impacted; 2 Maine residents. HHS OCR notified under HIPAA. Consumer notifications began Sept 12, 2025.

Community Health Network, Inc. (Indianapolis, IN) reported that an unknown unauthorized actor gained access to one employee email account between February 25–26, 2025. The breach was discovered on July 15, 2025 after a comprehensive manual review concluded on May 8, 2025. Protected health information (PHI), including full names, was potentially accessed. Two Maine residents were affected. Electronic notification was sent on September 12, 2025. No identity theft protection services were offered.

Community Health Network Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-25 and was reported on 2025-09-12. 13,939 Indiana residents were affected. 15,410 individuals affected in total.

Community Health Network, Inc. (IN) reported to HHS on 2025-07-07 a Hacking/IT Incident (email phishing) affecting 15,410 individuals. An employee was targeted by an email phishing scheme that exposed PHI including clinical, demographic, and financial information. Breached information was located on Email. The CE notified HHS, affected individuals, and the media, and posted substitute notice on its website. Mitigation included additional technical, administrative, and security safeguards.

Community Health Network reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-25 and was reported on 2025-04-28. 1 Indiana residents were affected.

Community Health Network reported a data breach to the Indiana Attorney General. The breach occurred on 2025-01-16 and was reported on 2025-04-11. 1 Indiana residents were affected.

Community Health Network reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-12 and was reported on 2024-09-04. 1 Indiana residents were affected.

Community Healthcare Network, Inc. reported to HHS on 2023-11-30 a Hacking/IT Incident affecting 500 individuals. Breached information located on Network Server. The incident involved PHI including names, SSNs, addresses, claims, and treatment data. The entity provided credit monitoring and implemented additional safeguards.

Community Health Network, Inc. reported to HHS on 2023-11-17 a Hacking/IT Incident affecting 20777 individuals. Breached information located on Email, Other. An employee was targeted by a phishing scheme exposing PHI including names, addresses, DOB, and claims.

Community Health Network, Inc. reported to HHS on 2020-09-11 a Hacking/IT Incident affecting 81,118 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, and the media.

Community Health Network, Inc. reported to HHS on 2019-05-06 a Hacking/IT Incident affecting 6600 individuals. Breached information located on Email. Employees were victims of email phishing schemes exposing PHI including names, DOB, SSN, diagnoses, and medication info. CE implemented technical safeguards and staff retraining.

Community Health Network (IN) reported to HHS on 2015-03-20 a Loss affecting 650 individuals. On February 2, 2015, the CE learned a binder containing point-of-care test results could not be located at one of its facilities; it was never recovered. The binder contained PHI including names, dates of service, test types, test results, and possibly dates of birth. Breached information was on Paper/Films. The CE notified HHS, affected individuals, and media, and subsequently retrained staff, implemented a quality control log, and directed practices to use electronic medical records. OCR obtained assurances of corrective action.