US nonprofit healthcare provider says hackers stole medical and personal data of 1M+ patients

Community Health Center (CHC), a Connecticut-based nonprofit healthcare provider, has announced that hackers have gained unauthorized access to the sensitive information of over one million patients.

In a report submitted to the attorney general of Maine, CHC disclosed that they noticed suspicious activity on their network on January 2nd and later confirmed that a skilled criminal hacker had infiltrated their system to steal personal and health data of more than a million patients. The breach occurred on October 14, 2024, as per the filing.

CHC offers various healthcare services to over 100,000 Connecticut residents, including school-based healthcare and substance abuse programs. The compromised data may include patients’ contact information, medical history, test results, Social Security numbers, and insurance details.

Fortunately, the hacker did not tamper with or encrypt any data, and CHC’s operations remain unaffected by the incident. At this time, no known cybercriminal group has taken responsibility for the breach.