Community Health Care Data Breach Exposes Social Security Numbers

Community Health Care Inc., a multi-specialty healthcare organization, disclosed a data breach that affected 808 individuals in the United States.

The breach was disclosed to the U.S. Department of Health and Human Services on Aug. 11, 2026. Community Health Care also posted a notice about the incident on its website.

Community Health Care became aware of suspicious activity within its email environment on June 12, 2026. The company identified unauthorized access to one employee email account. The unauthorized access was identified after the organization noticed that the email account had been compromised due to a phishing attack targeting multiple individuals.

After detecting the suspicious activity, the company launched an investigation. Through that investigation, Community Health Care determined that the unauthorized individual had accessed emails within the single compromised account.

The types of personally identifiable information (PII) that may have been exposed include names, dates of birth, addresses, phone numbers and Social Security numbers.

Protected health information (PHI) that may have been involved includes health insurance information, diagnostic and treatment information, patient ID numbers, medical record numbers and provider names.

Community Health Care's response to the breach

The company sent notifications to affected individuals to provide details about the breach and to explain the steps being taken to protect their information.

The company additionally recommended that affected individuals review their account statements and credit reports, stay alert for signs of fraud or identity theft, and report any suspicious activity to their financial institutions and local law enforcement.