Huge healthcare data breach exposes over 1 million Americans’ sensitive information

The healthcare industry has been a prime target for cyberattacks in recent years, with major incidents like the 2024 Ascension attack and the Change Healthcare breach making headlines. Now, we can add another breach to the list. Community Health Center, Inc. (CHC), a Connecticut-based federally qualified health center, has disclosed a data breach affecting over a million people in the U.S.

CHC detected the breach on Jan. 2 after noticing unusual activity in its computer systems. An investigation revealed that a skilled hacker had accessed and extracted data, but did not delete or lock any information. This is a positive outcome, as hackers often deploy ransomware to lock systems and demand payment for access.

In a regulatory filing, CHC stated that 1,060,936 individuals were affected by the breach. The compromised data includes names, dates of birth, addresses, phone numbers, email addresses, diagnoses, treatment details, test results, Social Security numbers, and health insurance information. For individuals who received COVID-19 services at a CHC clinic but are not regular patients, additional information such as gender, race, ethnicity, insurance details, test dates, results, and vaccine details may have been exposed.

CHC has not disclosed how the hackers gained access to the data or whether proper cybersecurity measures were in place at the time of the breach. While the organization claims that its systems are now secure, patients may still be at risk of further cyberattacks. CHC is offering free identity theft protection services for all affected individuals and encouraging those whose Social Security numbers were not compromised to take additional steps to protect their information.

To protect yourself from the CHC data breach and similar incidents, consider the following steps:

1. Remove your personal information from the internet using a reputable data removal service.
2. Be cautious of mailbox communications and verify the authenticity of any suspicious letters.
3. Beware of phishing attempts and install strong antivirus software on all your devices.
4. Monitor your financial accounts for unauthorized transactions or suspicious activity.
5. Recognize and report any Social Security scams.
6. Invest in identity theft protection services to monitor your personal information and receive alerts for any suspicious activity.

While CHC has taken measures to secure its systems and assist affected individuals, it is important for everyone to remain vigilant against potential cyber threats. By staying informed and taking proactive steps to protect your data, you can reduce the risk of falling victim to cyberattacks in the future.