Community First Medical Center
ent_074d067d84770d7ed6e9030d
Disclosures
9
State AG · HHS OCR · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
216,047
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Community First Medical Center
- Normalized
- community first medical center— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (9)newest first
- New Hampshire State AGas victim2023-10-04
Community First Medical Center (CFMC) notified the NH AG of a data security incident where an unauthorized party accessed computer systems on or about July 12, 2023. CFMC discovered on July 28, 2023 that files containing personal information (including SSN, DOB, driver's license) were accessed. Approximately 2 NH residents were affected. CFMC engaged cybersecurity experts, offered credit monitoring, and sent notifications starting Sept 26, 2023.
- Massachusetts State AGas victim2023-10-02
Community First Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-02. 20 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-09-28
Community First Medical Center issued a consumer notification letter to Montana residents regarding a cybersecurity incident involving unauthorized access to personal and medical information. The organization offered complimentary credit monitoring and established a toll-free response line. Specific details regarding the date of the incident, discovery, or number of affected individuals were not provided in the notification text.
- Indiana State AGas victim2023-09-26
Community First Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-12 and was reported on 2023-09-26. 563 Indiana residents were affected. 216,047 individuals affected in total.
- Maine State AGas victim2023-09-26
Community First Medical Center, a healthcare organization, reported an external system breach that occurred on July 12, 2023. The breach was discovered on July 28, 2023, and affected 216,047 individuals. The compromised information included names and Social Security Numbers. Affected individuals were notified in writing on September 26, 2023, and offered identity theft protection services.
- ILLINOISHHS OCRas victim2023-09-26
Community First Medical Center (IL healthcare provider) reported a hacking/IT incident involving a network server that affected the PHI of 216,047 individuals. Compromised data included names, addresses, telephone numbers, email addresses, Social Security numbers, medical record numbers, and health insurance information. The entity notified HHS, affected individuals, and the media, provided substitute notice and complimentary credit monitoring, implemented additional safeguards, and received OCR technical assistance regarding the HIPAA Rules.
- Vermont State AGas victim2023-09-26
Community First Medical Center notified consumers of a data breach involving personal and medical information. The notice, filed with the Vermont Attorney General on September 26, 2023, details the incident and offers complimentary credit monitoring. Specifics regarding the attack vector, date of discovery, or number of affected individuals are not disclosed in the provided text.
- Illinois State AGas victim2023-01-01
COMMUNITY FIRST MEDICAL CENTER filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-667). The register records the breach as discovered on July 12, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- NEW JERSEYHHS OCRas victim2022-02-14
Community Medical Center reported to HHS on 2022-02-14 a Hacking/IT Incident affecting 630 individuals. Breached information located on Email. An employee of a business associate was the victim of an email phishing attack compromising ePHI (names, SSNs, medications, treatment info). The CE notified HHS, individuals, and media; the BA implemented additional technical safeguards.