Community Health Systems Professional Services Corporation

Community Health Systems Professional Services Corporations (CHSPSC), LLC reported to HHS on 2023-03-16 a Hacking/IT Incident affecting 962884 individuals. Breached information located on Network Server.

Community Health Systems Professional Services Corporations reported to HHS a hacking incident affecting 6,121,158 individuals, first disclosed on August 21, 2014. The incident, which concluded in August 2014, involved a cyber-hacking group using compromised administrative credentials to access and exfiltrate protected health information from a network server. An OCR investigation revealed systemic noncompliance with HIPAA security rules, leading to a $2.3 million settlement and a corrective action plan.

Community Health Systems Professional Services Corporation (CHSPSC) confirmed an external cyber attack on its network between April and June 2014, discovered in July 2014. The attacker, believed to be a Chinese Advanced Persistent Threat group, bypassed security measures and exfiltrated data including names, addresses, birthdates, Social Security numbers, phone numbers, and employer/guarantor names. No credit card or medical/clinical information was taken. CHSPSC engaged forensic experts and federal law enforcement, contained the breach, and offered one year of identity theft protection via Kroll.

Community Health Systems Professional Services Corporation (TN) reported to HHS OCR on 2014-08-20 a Theft incident affecting 4,500,000 individuals. The breached information was located on a Network Server. A business associate was present. No further detail is available from the HHS web description.