Florida Community Health Centers

Florida Community Health Centers (FCHC) suffered a cybersecurity breach discovered on June 13, 2023, involving unauthorized external access to its systems. The incident compromised sensitive personal information of 296,635 individuals, including 63 Maine residents. While the exact type of data exposed was not fully detailed, the scale and nature of the breach—affecting a healthcare provider—suggest exposure of protected health information (PHI), such as medical records, Social Security numbers, or financial details. The breach posed significant risks of identity theft and fraud, prompting FCHC to offer identity theft protection services to affected individuals. The prolonged period between discovery (June 2023) and public disclosure (July 2024) further raises concerns about delayed response and potential ongoing vulnerabilities. As a healthcare entity, the breach undermines patient trust and may lead to regulatory penalties under laws like HIPAA. The attack’s focus on a community health network also highlights systemic risks in public health infrastructure, where data security failures can have cascading effects on vulnerable populations.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/df1d9ed8-efbd-4c51-87e0-d797c7ce77f5.html

TPRM report: https://www.rankiteo.com/company/florida-community-health-centers-inc.

"id": "flo036090625",
"linkid": "florida-community-health-centers-inc.",
"type": "Cyber Attack",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '296,635 (63 Maine residents '
                                              'specifically)',
                        'industry': 'Healthcare',
                        'location': 'Florida, USA',
                        'name': 'Florida Community Health Centers',
                        'type': 'Healthcare Provider'},
                       {'industry': 'Legal/Regulatory',
                        'location': 'Maine, USA',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government Agency'}],
 'attack_vector': 'External Hacking',
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals',
 'data_breach': {'number_of_records_exposed': '296,635',
                 'personally_identifiable_information': 'Yes (Identity theft '
                                                        'protection offered)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive Information'},
 'date_detected': '2023-06-13',
 'date_publicly_disclosed': '2024-07-01',
 'description': 'The Maine Office of the Attorney General reported that '
                'Florida Community Health Centers experienced a cybersecurity '
                'incident involving unauthorized access due to external '
                'hacking. Sensitive information of 296,635 individuals was '
                'affected, including 63 Maine residents. Identity theft '
                'protection services were offered to the impacted individuals.',
 'impact': {'data_compromised': 'Sensitive Information',
            'identity_theft_risk': 'High (Identity theft protection services '
                                   'offered)'},
 'references': [{'date_accessed': '2024-07-01',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General '
                                                       'notified'},
 'response': {'communication_strategy': 'Identity theft protection services '
                                        'offered to affected individuals'},
 'title': 'Florida Community Health Centers Cybersecurity Incident',
 'type': 'Data Breach'}