Community Health Center Data Breach Exposes PHI

On January 2, 2025, Community Health Center, Inc. (CHC) discovered a data breach that affected over one million people.

The breach, which occurred on October 14, 2024, exposed sensitive personal and medical information of 1,060,936 people across the United States, including 7,069 Massachusetts residents, 1,749 South Carolina residents and 1,695 Texas residents and 875 Maine residents.

The breach was reported to the U.S. Department of Health and Human Services and to the attorney generals of California, Maine, Massachusetts, Rhode Island, South Carolina, Texas.

Information types exposed:

• Name of individual
• Address
• Social Security Number
• Medical Information
• Health Insurance Information
• Date of Birth
• Phone number
• Email
• Diagnoses
• Treatment details
• Test results
• Guarantor information
• Progress notes
• Medications
• Records received from other providers
• Gender, race, ethnicity
• Date of test and result information
• Vaccine type, dose, and date administered

Community Health Center's Response

Affected individuals are encouraged to monitor their financial accounts and medical records for any suspicious activity. CHC has likely provided resources such as credit monitoring services or identity theft protection to help mitigate potential risks, although specific details were not disclosed in the information provided.

Given the severity of the breach and the sensitivity of the information involved, it is crucial for affected individuals to remain vigilant. Regularly updating passwords and being cautious of phishing attempts can also help protect personal information.