COMHAR Data Breach Exposes Social Security Numbers

COMHAR Inc., a Philadelphia-based nonprofit health and human services organization, disclosed a data breach. Founded in 1975, the organization provides integrated services in behavioral health, intellectual disabilities, HIV/AIDS support and home health care.

COMHAR published a notice of the data event on Sept. 4, 2026. The total number of individuals affected has not been disclosed.

On July 1, 2026, a threat actor known as Worldleaks posted on the dark web, claiming to have breached data belonging to COMHAR and threatening to publish the stolen information within one to two days.

COMHAR identified unusual activity on its network and began working with third-party specialists to investigate and determine the full nature of the incident. The specialists additionally helped COMHAR assess what data may have been accessed or removed during the intrusion.

On July 17, 2026, the investigation determined that certain files and folders had been copied by an unknown actor on or before that date.

Following this finding, COMHAR began a comprehensive review of the affected files and folders to determine the full nature and scope of the information at risk. At the time of the notification, this review was still ongoing. As a result, the complete picture of who was affected and what specific data was compromised may not yet be fully determined.

The types of information potentially exposed included both personally identifiable information and protected health information. The data at risk may include names, addresses, dates of birth, Social Security numbers, treatment notes, diagnoses, medications and health insurance information.

COMHAR's response to the breach

COMHAR is notifying individuals who may have been impacted by the breach. The organization encouraged affected individuals to remain vigilant against incidents of identity theft and fraud and to monitor for suspicious activity on their accounts and records.

COMHAR has set up a dedicated phone line for individuals who want more information about the incident. People can call 1-888-941-5180, Monday through Friday, between 8 a.m. and 8 p.m. ET, excluding holidays.

Individuals may also write to COMHAR at 100 W. Lehigh Ave., Philadelphia, PA 19133.