Community Health Center (CHC), a major healthcare provider in Connecticut, has announced a significant data breach impacting over 1 million patients. The organization, which offers primary care, dental, behavioral health, and specialty services, discovered the breach on January 2nd, 2025, revealing that threat actors had gained unauthorized access to their network in mid-October 2024. This cyberattack has resulted in the exposure of sensitive patient data, including names, birth dates, contact details, diagnoses, treatments, test results, Social Security numbers, and health insurance information. The healthcare provider has begun notifying the affected patients.
The breach was reportedly carried out by a skilled cybercriminal, according to CHC. The notification to patients stated that while the hackers did not delete or lock any data, they were able to steal a significant amount of information. CHC also clarified that the criminal's actions did not impact their daily operations and access to their systems was quickly cut off within hours. CHC has taken action by enhancing its security measures and implementing monitoring software. They also assured patients that there is no evidence to suggest any data has been misused.