A cybercriminal has stolen the sensitive medical and personal information of more than one million patients from Community Health Center (CHC), a Connecticut-based nonprofit healthcare provider.
In a recent filing with Maine’s attorney general, CHC revealed that it detected suspicious activity on its network on January 2. A subsequent investigation determined that a “skilled criminal hacker” had infiltrated the organization’s systems on October 14, 2024, accessing a trove of patient data.
CHC, which serves more than 100,000 Connecticut residents through school-based healthcare and substance abuse programs, said the stolen information may include patients’ addresses, phone numbers, diagnoses, treatment records, test results, Social Security numbers, and health insurance details.
Despite the breach, CHC confirmed that no data was deleted or encrypted, and its daily operations remain unaffected. As of now, no major cybercriminal group has claimed responsibility for the attack.
The nonprofit has not disclosed whether ransom demands were made but is working with authorities to assess the full impact of the breach.
