Community Health Center Data Breach Exposes PHI

On January 2, 2025, Community Health Center, Inc. (CHC) discovered a significant data breach that affected over one million people.

The breach, which occurred on October 14, 2024, exposed sensitive personal and medical information of 1,060,936 people across the United States.

Information types exposed:

• Name of individual
• Address
• Social Security Number
• Medical Information
• Health Insurance Information
• Date of Birth
• Phone number
• Email
• Diagnoses
• Treatment details
• Test results
• Guarantor information
• Progress notes
• Medications
• Records received from other providers
• Gender, race, ethnicity
• Date of test and result information
• Vaccine type, dose, and date administered

The breach was reported to several state attorney generals and the U.S. Department of Health and Human Services. For instance, the California Attorney General's office and the Texas Attorney General's office were notified on January 30 and February 3, 2025, respectively. The number of affected individuals varied by state, with Texas reporting 1,695 affected individuals and Massachusetts reporting 7,069.

Community Health Center's Response

In response to this breach, Community Health Center has taken several steps to address the situation and support those affected. They have notified consumers via multiple channels, including U.S. Mail, email, and media broadcasts, to ensure that all potentially impacted individuals are aware of the breach. Notifications began on January 30, 2025.

Affected individuals are encouraged to monitor their financial accounts and medical records for any suspicious activity. CHC has likely provided resources such as credit monitoring services or identity theft protection to help mitigate potential risks, although specific details were not disclosed in the information provided.

Given the severity of the breach and the sensitivity of the information involved, it is crucial for affected individuals to remain vigilant. Regularly updating passwords and being cautious of phishing attempts can also help protect personal information.