Community Family Care Medical Group IPA, Inc. disclosed a data breach involving unauthorized disclosure of member information by a contracted provider (Heritage Provider Network affiliates). The incident, occurring around July 2016 and discovered in 2017, involved the unauthorized transfer of names, demographics, DOB, and insurance IDs. No SSNs or medical records were compromised. CFC notified the OCR, conducted forensic investigations, and enhanced security protocols.