Anchorage Neighborhood Health Center (ANHC), a federally qualified health center, suffered a significant data breach where an anonymous hacker group claimed to have leaked 60,000 patient records (10,000 initially, followed by an additional 50,000). The compromised data included highly sensitive personal information such as Social Security numbers, home addresses, email addresses, phone numbers, and potentially medical records. The hackers directly contacted affected individuals, including a patient identified as 'Elizabeth,' who confirmed her data (SSN, address, contact details) was exposed. ANHC took affected systems offline, launched a forensic investigation with third-party cybersecurity experts, and engaged law enforcement, including the FBI and Anchorage Police Department.The breach poses severe risks, including identity theft, phishing, and long-term impersonation, given the sensitivity of healthcare data. ANHC offered affected patients complimentary credit monitoring and identity protection services, though some, like Elizabeth, had to persistently demand extended coverage. While ANHC stated no evidence of medical records being compromised, the scale and nature of the leaked data combined with the targeting of a healthcare provider serving underserved populations heighten concerns over fraud, financial exploitation, and reputational damage to the organization. The FBI is investigating potential federal criminal violations.
TPRM report: https://www.rankiteo.com/company/anchorage-neighborhood-health-center-inc.
"id": "anc2562125091625",
"linkid": "anchorage-neighborhood-health-center-inc.",
"type": "Breach",
"date": "9/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '60,000 (claimed by hackers; '
'10,000 initially reported, '
'50,000 additional claimed)',
'industry': 'healthcare',
'location': 'Anchorage, Alaska, USA',
'name': 'Anchorage Neighborhood Health Center (ANHC)',
'type': 'federally qualified health center'}],
'customer_advisories': 'ANHC offered credit monitoring, identity protection '
'services, and assistance with filing reports to '
'affected patients (e.g., Elizabeth)',
'data_breach': {'data_exfiltration': 'yes (hackers claimed to have stolen and '
'leaked data; contacted patients '
'directly with their PII)',
'number_of_records_exposed': '60,000 (claimed; 10,000 '
'initially, 50,000 additional)',
'personally_identifiable_information': ['Social Security '
'numbers',
'home addresses',
'email addresses',
'phone numbers'],
'sensitivity_of_data': 'high (includes Social Security '
'numbers, addresses, contact details)',
'type_of_data_compromised': ['patient records',
'personally identifiable '
'information (PII)',
'potentially medical histories']},
'date_publicly_disclosed': '2023-09-05',
'description': 'An anonymous hacker group claimed to have leaked an '
'additional 50,000 Anchorage Neighborhood Health Center (ANHC) '
'patient records, following an initial claim of 10,000 '
'records. The FBI confirmed awareness of the incident, and '
'ANHC initiated a forensic investigation while taking affected '
'systems offline. Personal data, including Social Security '
'numbers, addresses, and contact details, were reportedly '
'exposed. ANHC offered credit monitoring and identity '
'protection services to affected patients.',
'impact': {'brand_reputation_impact': 'potential reputational damage due to '
'exposure of sensitive patient data and '
'public disclosure',
'customer_complaints': 'at least one patient (Elizabeth) reported '
'direct contact by hackers; multiple '
'entities (Alaska’s News Source, Alaska '
'Department of Public Safety, Tanana Chiefs '
'Conference, Alaska Nurses Association) '
'received copies of hackers’ emails',
'data_compromised': ['patient records (60,000 total claimed)',
'Social Security numbers',
'home addresses',
'email addresses',
'phone numbers',
'potentially medical histories'],
'downtime': 'affected systems taken offline (duration unspecified)',
'identity_theft_risk': 'high (Social Security numbers, personal '
'details exposed)',
'legal_liabilities': 'FBI investigating potential federal criminal '
'violations; ANHC notified law enforcement '
'and offered to file reports with state '
'attorney general/FTC',
'operational_impact': 'forensic investigation ongoing; third-party '
'cybersecurity experts engaged'},
'initial_access_broker': {'high_value_targets': 'patient records (PII, '
'potentially medical '
'histories)'},
'investigation_status': 'ongoing (FBI investigation; ANHC’s forensic '
'investigation in progress)',
'recommendations': ['File a police report if identity is stolen/misused (per '
'McAfee’s Abhishek Karnik)',
'Alert the company (ANHC)',
'Report to the FTC',
'Protect credit (e.g., credit monitoring)',
'Change passwords',
'ANHC’s offered steps: complimentary credit monitoring, '
'identity protection services, and ongoing identity theft '
'protection'],
'references': [{'source': 'KTUU (Alaska’s News Source)',
'url': 'https://www.ktuu.com'},
{'source': 'FBI Anchorage Field Office statement (via Chloe '
'Martin)'},
{'source': 'Anchorage Neighborhood Health Center (ANHC) '
'website/email statements'},
{'source': 'McAfee Threat Research (Abhishek Karnik)'}],
'regulatory_compliance': {'legal_actions': 'FBI investigation ongoing; '
'potential federal criminal '
'violations under review',
'regulatory_notifications': 'law enforcement '
'notified (FBI, '
'Anchorage Police '
'Department); patients '
'offered assistance to '
'file reports with '
'state attorney '
'general/FTC'},
'response': {'communication_strategy': 'public statement on website; direct '
'communication with affected patients '
'(e.g., Elizabeth); offers of credit '
'monitoring/identity protection',
'containment_measures': 'affected systems taken offline',
'incident_response_plan_activated': 'yes (response protocols '
'enacted)',
'law_enforcement_notified': 'yes (FBI Anchorage Field Office, '
'Anchorage Police Department)',
'third_party_assistance': 'yes (third-party cybersecurity '
'experts engaged)'},
'stakeholder_advisories': 'Alaska’s News Source, Alaska Department of Public '
'Safety, Tanana Chiefs Conference, Alaska Nurses '
'Association received copies of hackers’ emails',
'threat_actor': 'anonymous hacker group',
'title': 'Anchorage Neighborhood Health Center Data Breach',
'type': ['data breach', 'unauthorized access']}