Community Health Network, a network of over 100 medical facilities including hospitals, surgery centers, imaging facilities, physical therapy centers and more experienced a major data breach. On May 8, 2025 an investigation revealed an unauthorized actor potentially accessed and acquired sensitive Community Health Network data between Feb. 25 and Feb. 26, 2025.
Community Health Network has determined that both personally identifiable information (PII) and protected health information (PHI) may have been compromised. This included names, dates of birth, medical treatment records and health insurance information.
Community Health Network published a Notice of Data Security Incident on its website on July 7, 2025. Community employs over 16,000 people and serves thousands of patients a year and the scale of the breach may be severe.
The company began notifying affected individuals by mail on Sept. 15, 2025. The cybersecurity incident was disclosed to the Maine Attorney General's office on Sept. 14, 2025 and the Massachusetts Attorney General on Sept. 15,2025. Impacted individuals includes 13,939 Indiana residents, two in Maine and four in Massachusetts.
The data breach was subsequently disclosed to the New Hampshire Attorney General on Sept. 22, 2025.
In addition to the published notice on its website, Community will be required to disclose the data breach to certain state and federal authorities. Community Health Network will work to identify and notify affected individuals with the data breach details.
If you believe your personal work protected health information may have been compromised in this breach:
Community Health has set up a response line at 833-594-5348, 9 a.m. to 9 p.m. EST, Monday through Friday.
For more information about the organization and its over 100 locations and facilities, visit the Community Health Network, Inc. website.