Community Health Center (CHC), a leading Connecticut healthcare provider, is notifying over 1 million patients of a data breach that impacted their personal and health data.
The non-profit organization provides primary medical, dental, and mental health services to more than 145,000 active patients.
CHC said in a Thursday filing with Maine’s attorney general that unknown attackers gained access to its network in mid-October 2024, a breach discovered more than two months later, on January 2, 2025.
While the threat actors stole files containing patients’ personal and health information belonging to 1,060,936 individuals, the healthcare organization says they didn’t encrypt any compromised systems and that the security breach didn’t impact its operations.
[…]
Depending on the affected patient, the attackers stole a combination of:
- personal (names, dates of birth, addresses, phone numbers, emails, Social Security numbers) or
- health information (medical diagnoses, treatment details, test results, and health insurance.
A CHC spokesperson was not immediately available when BleepingComputer reached out for more details on the incident.
While CHC said the hackers didn’t encrypt any of its systems, more ransomware operations have switched tactics to become data theft extortion groups in recent years.
[…]
In response to this surge of massive healthcare security breaches, the U.S. Department of Health and Human Services (HHS) proposed updates to HIPAA (short for Health Insurance Portability and Accountability Act of 1996) in late December to secure patients’ health data.
Source: US healthcare provider data breach impacts 1 million patients
Robin Edgar
Organisational Structures | Technology and Science | Military, IT and Lifestyle consultancy | Social, Broadcast & Cross Media | Flying aircraft