Connecticut healthcare supplier Neighborhood Well being Heart, Inc. (CHC) is notifying over a million people that their private info was compromised in a data breach.
The incident was recognized on January 2, 2025, after the non-profit group found uncommon exercise on its community, which prompted it to retain security consultants to research and enhance the security of its techniques.
“They discovered {that a} expert legal hacker obtained into our system and took some knowledge, which could embody your private info,” CHC says.
The attacker, the group says, accessed or exfiltrated affected person well being data that included names, addresses, dates of beginning, Social Safety numbers, telephone numbers, e-mail addresses, take a look at outcomes, analysis and remedy info, and medical insurance info.
The kind of compromised info, CHC mentioned in an incident discover, might differ by particular person, because the data breach impacts present and former sufferers, “and all people who acquired a COVID take a look at or vaccine at a CHC clinic”.
The healthcare supplier says that file-encrypting ransomware was not used within the assault and that the menace actor didn’t delete knowledge from its techniques, which allowed it to proceed its day by day operations with out interruption.
“We consider we stopped the legal hacker’s entry inside hours, and that there isn’t any present menace to our techniques,” the group says.
In a regulatory submitting with the Maine Legal professional Normal’s Workplace, CHC mentioned that 1,060,936 individuals have been affected by the data breach. The group is offering the impacted people with two years of free identification theft and credit score monitoring companies.
“We’ve strengthened our security and added particular software program to look at for suspicious exercise. We’re additionally working to verify your info stays secure sooner or later. Up to now, there isn’t any signal that your info has been misused,” the group mentioned.
CHC has not shared particulars on who perpetrated the assault and if the attackers tried to extort it, and no identified ransomware group has claimed accountability for the incident. information.killnetswitch has emailed CHC for extra info and can replace this text if a reply arrives.
CHC is an unbiased, non-profit healthcare group that gives main care companies in medication, dentistry, and behavioral well being at practically a dozen places within the state of Connecticut.
