Community Health Center, Inc.

Community Health Center, Inc. notified patients of a data breach discovered on January 2, 2025, where a hacker accessed systems and exfiltrated personal and health information. The incident was contained within hours. Affected data includes names, SSNs, DOBs, and health records. CHC offered 24 months of credit monitoring via IDX.

Community Health Center, Inc. notified patients and guarantors of a data breach discovered on January 2, 2025, where a criminal hacker accessed systems and exfiltrated PHI, SSNs, and financial data. Notices were sent on January 30, 2025, offering 24 months of credit monitoring.

Community Health Center, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-01-31. 7,069 Massachusetts residents were affected.

Community Health Center, Inc. (CHC) notified the Rhode Island Attorney General of a cybersecurity incident discovered on January 2, 2025. A sophisticated criminal actor accessed CHC's IT systems and exfiltrated electronic health records and personal information, impacting 1,060,936 individuals, including 2,042 Rhode Island residents. Data exposed included names, SSNs, diagnoses, and treatment details. CHC revoked access, engaged forensic investigators, and offered 24 months of identity theft protection to affected individuals.

Community Health Center, Inc. (CHC), a federally qualified health center, notified the NH Attorney General of a data breach discovered on January 2, 2025. A sophisticated criminal actor accessed CHC's IT systems and exfiltrated data, likely including the electronic health record database. The actor did not encrypt or delete data. 781 New Hampshire residents were affected. Data included PHI, SSNs, and basic identity information. CHC engaged forensic investigators, contained the breach, and offered identity theft protection services.

Community Health Center, Inc. reported to HHS on 2025-01-30 a Hacking/IT Incident affecting 1,060,936 individuals. Breached information located on Electronic Medical Record, Network Server.

Community Health Center, Inc., a health care entity filed a data breach notification with the Nebraska Attorney General. The breach was discovered on 2025-01-02. The breach is dated 2024-10-14. Nebraska residents were notified on 2025-01-30.

Community Health Center, Inc. disclosed a data breach where a skilled criminal hacker accessed and exfiltrated patient data, including PHI, SSNs, and health insurance info. The breach occurred on Oct 14, 2024, and was discovered on Jan 2, 2025. The attacker was contained within hours. No ransomware was used. Identity protection services were offered to affected individuals.

Community Health Center, Inc. (CHC), a federally qualified health center, notified the Maryland AG of a cybersecurity incident. On Jan 2, 2025, CHC detected unauthorized access by a sophisticated criminal actor who exfiltrated electronic health records and personal data (including SSNs) from its IT environment. Access was revoked within hours. 752 Maryland residents were affected. CHC retained forensic investigators, notified federal law enforcement, and sent notifications offering 24 months of identity theft prevention services.

Community Health Center Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-14 and was reported on 2025-01-30. 251 Indiana residents were affected. 1,060,936 individuals affected in total.

Community Health Center, Inc. reported an external system breach (hacking) occurring on October 14, 2024, discovered on January 2, 2025. The incident affected 1,060,936 individuals nationwide, including 875 Maine residents. Compromised data included PHI, SSNs, names, and financial info. Notices were sent on January 30, 2025, offering 24 months of identity protection.

COMMUNITY HEALTH CENTER, INC filed a data-breach notice with the Illinois Attorney General in January 2025 (case 25-01-116). The register records the breach as discovered on January 2, 2025. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.