Community Health Center, Inc.

On October 14, 2024, Community Health Center, Inc. suffered an external system breach (hacking), compromising the personal data of 1,060,936 individuals, including 875 Connecticut residents. The incident was detected on January 2, 2025, and reported to the Maine Office of the Attorney General on January 30, 2025. The breach exposed sensitive information, prompting the organization to offer 24 months of identity theft protection, including credit monitoring and recovery services. The scale of the breach affecting over a million individuals suggests a large-scale data exfiltration, likely involving personal and possibly medical records, given the nature of the targeted entity (a healthcare provider). The delayed discovery (nearly three months) further exacerbates risks of fraud, identity theft, and long-term reputational damage. The provision of extended identity protection underscores the severity of the potential harm to affected individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ef9efbea-06fa-4d12-814a-40c6e4456e72.html

TPRM report: https://www.rankiteo.com/company/community-health-center

"id": "com000091825",
"linkid": "community-health-center",
"type": "Breach",
"date": "10/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1060936,
                        'industry': 'Healthcare',
                        'location': 'Maine (with affected individuals in '
                                    'Connecticut)',
                        'name': 'Community Health Center, Inc.',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Identity theft protection services offered (24 months '
                        'of monitoring and recovery)',
 'data_breach': {'number_of_records_exposed': 1060936,
                 'personally_identifiable_information': True},
 'date_detected': '2025-01-02',
 'date_publicly_disclosed': '2025-01-30',
 'description': 'The Maine Office of the Attorney General reported that '
                'Community Health Center, Inc. experienced an external system '
                'breach (hacking) on October 14, 2024, potentially affecting '
                '1,060,936 individuals, including 875 residents of '
                'Connecticut. Identity theft protection services were offered '
                'for 24 months, including monitoring and recovery services.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'references': [{'date_accessed': '2025-01-30',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Offered identity theft protection '
                                        'services (24 months of monitoring and '
                                        'recovery)'},
 'title': 'Community Health Center, Inc. External System Breach',
 'type': 'External System Breach (Hacking)'}