Communities Connected for Kids, Inc. (CCK)

Communities Connected for Kids (CCK) notified individuals of a data breach involving a third-party vendor. Unauthorized access occurred between August 2018 and March 2019, exposing PII, SSNs, financial data, and PHI of children and parents. CCK engaged forensic experts, issued public notices, and offered credit monitoring.

Communities Connected for Kids, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-08-29. 164 Massachusetts residents were affected. The report records the breach type as electronic.

Communities Connected for Kids, Inc. notified the NH AG of a data event affecting 32 NH residents. Unauthorized access occurred between Aug 2018 and Mar 2019 via a third-party vendor. Data included SSNs, driver's licenses, financial info, and PHI. CCK engaged forensic experts and provided 1 year of credit monitoring.

Communities Connected for Kids, Inc. reported to HHS on 2019-05-15 a Hacking/IT Incident affecting 192,041 individuals. Breached information located on Network Server. A vendor experienced a cyber-attack affecting ePHI (names, addresses, DOB, driver's license, SSN, diagnoses, lab results, medications). The BA notified HHS, individuals, and media, provided credit monitoring, updated its risk management plan, and implemented technical safeguards.

COMMUNITIES CONNECTED FOR KIDS, INC. filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-346). The register records the breach as discovered on August 1, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.