Native American Health Center

Native American Health Center reported to HHS on 2026-01-14 a Hacking/IT Incident affecting 2,451 individuals. Breached information located on Network Server. The incident involved a business associate experiencing a hacking attack that exposed protected health information (PHI), including clinical and demographic data. The business associate provided complimentary credit monitoring and implemented additional administrative, technical, and security safeguards.

Native American Health Center, Inc. notified patients of a data security incident involving a third-party vendor, TriZetto, which works with their electronic medical record system (OCHIN). On December 15, 2025, the center was notified that an unauthorized individual gained access to TriZetto's systems. Affected data may include names, social security numbers, dates of birth, contact information, and health-related or insurance information. The incident is contained, and the organization is working with OCHIN to ensure security measures are in place.

Native American Health Center (NAHC) notified the NH Attorney General of a cybersecurity incident on Nov 19, 2023. Forensic investigation found unauthorized access to files. One NH resident (employee or patient) was affected. NAHC engaged forensic investigators, secured the network, and offered credit monitoring.

Native American Health Center (NAHC) notified individuals of a data security incident where unauthorized access occurred between November 1 and November 19, 2023. NAHC discovered the incident on November 19, 2023, and immediately disconnected network access. A forensic investigation concluded in January 2024 that files were accessed by an unauthorized actor. Affected data includes names, dates of birth, and medical information (PHI). Social Security numbers were not impacted. NAHC replaced hard drives, enhanced MFA, and offered 12 months of credit monitoring.

Native American Health Center reported to HHS on 2024-01-18 a Hacking/IT Incident affecting 4231 individuals. Breached information located on Network Server. The incident involved ransomware encrypting PHI including names, addresses, DOBs, SSNs, and treatment info. CE provided credit monitoring and enhanced safeguards.