Community Nurse

Doctor Alliance, a document management and billing vendor for Community Nurse, experienced unauthorized access to files containing personal health information between October 31 and November 17, 2025. The incident was discovered on November 13, 2025. Affected data included names, addresses, dates of birth, Medicare numbers, medical record numbers, diagnoses, medication lists, and treatment orders. Social Security numbers were not involved. Doctor Alliance engaged cybersecurity experts, notified law enforcement, and implemented enhanced security measures.

Community Nurse, a home health care provider, notified the New Hampshire Attorney General of a data security incident involving its third-party vendor, Doctor Alliance. Unauthorized access to personal and health information occurred between October 31 and November 17, 2025. The incident affected approximately 8 New Hampshire residents, exposing names, addresses, DOBs, Medicare numbers, and medical records. Community Nurse engaged forensic specialists, notified the FBI, and sent notification letters on March 11, 2026.

Community Nurse reported a third-party vendor breach involving Doctor Alliance. Unauthorized access to files occurred between Oct 31 and Nov 17, 2025. 6,746 individuals affected, including 7 Maine residents. PHI and basic PII exposed. Discovered March 2, 2026; notification sent March 11, 2026.

Community Nurse (MA) reported to HHS on 2026-03-12 a Hacking/IT Incident affecting 6,746 individuals. The breach originated at a business associate's network. PHI involved demographic and treatment information. The CE notified HHS, affected individuals, and the media. OCR provided technical assistance regarding the HIPAA Rules. Breached information located on Network Server.