Community Care Alliance Data Breach Affects 114,945 People

On January 8, 2025, Community Care Alliance (CCA), a non-profit organization based in Rhode Island, discovered a significant data breach affecting the personal information of approximately 114,945 individuals across the United States. This breach involved unauthorized access to sensitive data, including names, addresses, dates of birth, Social Security numbers, and detailed medical information such as diagnoses, lab results, and treatment details.

The breach occurred between July 1 and July 5, 2024, when an unauthorized individual accessed CCA's systems, leading to a network disruption.

Community Care Alliance's Response

In response to the breach, Community Care Alliance promptly engaged third-party specialists to conduct a thorough investigation and enhance their cybersecurity measures. They have implemented additional technical safeguards to prevent future incidents and are offering affected individuals 12 months of free credit monitoring and identity protection services through Cyberscout, a TransUnion company. Affected individuals are encouraged to remain vigilant by reviewing their credit reports and account statements for any suspicious activity.

Community Care Alliance has also set up a dedicated assistance line at 1-833-998-5800 for those seeking more information or guidance. They recommend that individuals take advantage of the credit monitoring services provided and consider placing fraud alerts or credit freezes on their credit files to further protect their personal information.

For those affected by the breach, detailed information on what to do next can be found in the notice to consumers provided by Community Care Alliance. Additionally, official disclosures have been made to several state attorney generals and the U.S. Department of Health and Human Services, which can be accessed through the Maine Attorney General's website and the Vermont Attorney General's website.