The Children’s Center of Hamden, a psychiatric residential treatment facility in Connecticut, suffered a ransomware attack in December 2024, attributed to the Inc ransomware group. The breach compromised 5,213 individuals' highly sensitive data, including names, Social Security numbers, dates of birth, state-issued IDs (driver’s licenses, passports), biometric data, medical diagnoses, and treatment records. Inc published sample stolen documents as proof, though the Center neither confirmed the full scope nor disclosed ransom payments. The attack forced the Center to notify victims in June 2025, offering 24 months of credit monitoring and $1M identity theft insurance via TransUnion. As a healthcare provider, the breach risks long-term fraud, identity theft, and reputational harm, while the double-extortion ransomware (data theft + system encryption) could have disrupted critical patient care operations, though no operational impact was explicitly detailed. The incident aligns with a broader trend of rising ransomware attacks on U.S. healthcare, with Inc alone targeting 45 healthcare organizations since 2023.
TPRM report: https://www.rankiteo.com/company/the-childrens-center-of-hamden
"id": "the841090125",
"linkid": "the-childrens-center-of-hamden",
"type": "Ransomware",
"date": "6/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '5,213',
'industry': 'Healthcare',
'location': 'Hamden, Connecticut, USA',
'name': 'Children’s Center of Hamden',
'type': 'Psychiatric Residential Treatment Facility'}],
'attack_vector': ['Spear Phishing', 'Exploiting Known Vulnerabilities'],
'customer_advisories': '24 months of free credit monitoring and $1 million in '
'identity theft insurance offered via TransUnion. '
'Enrollment deadline: 90 days from receipt of notice.',
'data_breach': {'data_exfiltration': 'Yes (Sample Documents Posted by Inc)',
'file_types_exposed': ['Documents (Likely PDFs, Medical '
'Records)'],
'number_of_records_exposed': '5,213',
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers',
'Dates of Birth',
'State-Issued ID Info',
'Biometric Data'],
'sensitivity_of_data': 'High (Includes SSNs, Biometric Data, '
'Medical Records)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-12-28',
'date_publicly_disclosed': '2025-06-29',
'description': 'The Children’s Center of Hamden, Connecticut confirmed a data '
'breach in December 2024, compromising personal and protected '
'health information of 5,213 individuals. The ransomware group '
'Inc claimed responsibility in February 2025, posting sample '
'images of stolen documents. The Center discovered unusual '
'activity on December 28, 2024, and notified affected '
'individuals on June 29, 2025. The breach exposed names, '
'Social Security numbers, dates of birth, state-issued ID '
'info, biometric data, medical diagnoses, and treatments. The '
'Center is offering 24 months of free credit monitoring and $1 '
'million in identity theft insurance through TransUnion.',
'impact': {'brand_reputation_impact': 'High (Healthcare Data Breach)',
'data_compromised': ['Names',
'Social Security Numbers',
'Dates of Birth',
'State-Issued ID Info (Driver’s License, '
'Passport)',
'Biometric Data',
'Medical Diagnoses',
'Treatments'],
'identity_theft_risk': 'High (PII and PHI Exposed)'},
'initial_access_broker': {'data_sold_on_dark_web': 'Likely (Inc Operates RaaS '
'with Data Theft '
'Component)',
'high_value_targets': ['Patient PII/PHI Data']},
'investigation_status': 'Ongoing (No Further Details from Children’s Center)',
'motivation': ['Financial Gain', 'Data Theft', 'Extortion'],
'post_incident_analysis': {'corrective_actions': ['Credit Monitoring for '
'Victims',
'Identity Theft Insurance']},
'ransomware': {'data_encryption': 'Likely (Double-Extortion Scheme)',
'data_exfiltration': 'Yes',
'ransomware_strain': 'Inc Ransomware'},
'references': [{'source': 'Comparitech'},
{'source': 'Children’s Center of Hamden Breach Notice'}],
'response': {'communication_strategy': 'Victim Notification Letters '
'(Deadline: 90 days from receipt)',
'incident_response_plan_activated': 'Yes (Investigation '
'Conducted)',
'third_party_assistance': ['TransUnion (Credit Monitoring and '
'Identity Theft Insurance)']},
'stakeholder_advisories': 'Victim Notification Letters Sent (June 29, 2025)',
'threat_actor': 'Inc (Ransomware Group)',
'title': 'Data Breach at Children’s Center of Hamden',
'type': ['Data Breach', 'Ransomware Attack']}