Community Health Network: Data Breach Affects PHI

Published
July 9, 2025
Updated
September 25, 2025
Community Health Network: Data Breach Affects PHI
Community Health Network
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Community Health Network

data breach?

Join the Lawsuit

It's free to join. 

Community Health Network, a network of over 100 medical facilities including hospitals, surgery centers, imaging facilities, physical therapy centers and more experienced a major data breach. On May 8, 2025 an investigation revealed an unauthorized actor potentially accessed and acquired sensitive Community Health Network data between Feb. 25 and Feb. 26, 2025.

Community Health Network has determined that both personally identifiable information (PII) and protected health information (PHI) may have been compromised. This included names, dates of birth, medical treatment records and health insurance information.

Community Health Network published a Notice of Data Security Incident on its website on July 7, 2025. Community employs over 16,000 people and serves thousands of patients a year and the scale of the breach may be severe.

The company began notifying affected individuals by mail on Sept. 15, 2025. The cybersecurity incident was disclosed to the Maine Attorney General's office on Sept. 14, 2025 and the Massachusetts Attorney General on Sept. 15,2025. Impacted individuals includes 13,939 Indiana residents, two in Maine and four in Massachusetts.

The data breach was subsequently disclosed to the New Hampshire Attorney General on Sept. 22, 2025.

Community Health Network, Inc.'s response

In addition to the published notice on its website, Community will be required to disclose the data breach to certain state and federal authorities. Community Health Network will work to identify and notify affected individuals with the data breach details.

If you believe your personal work protected health information may have been compromised in this breach:

  • Carefully review any notice or communication you receive from Community Health Network or a medical facility or provider..
  • Monitor financial accounts and credit reports for signs of identity theft.
  • Consider placing fraud alerts or credit freezes with the major credit bureaus.
  • Be cautious of unsolicited emails or phone calls requesting personal information.

Community Health has set up a response line at 833-594-5348, 9 a.m. to 9 p.m. EST, Monday through Friday.

For more information about the organization and its over 100 locations and facilities, visit the Community Health Network, Inc. website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
September 14, 2025
Date of Breach
February 26, 2025
Breach Discovered Date
July 15, 2025
Total People Affected
Information Types Exposed
  • dates of birth
  • dates of service
  • full name
  • health insurance information
  • medical information
  • medical treatment location
  • names
  • nan
  • patient number
  • provider name
  • Medical Records
  • Protected Health Information
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image