US nonprofit healthcare provider says hackers stole medical and personal data of 1M+ patients

Community Health Center (CHC), a Connecticut-based nonprofit healthcare provider, has confirmed that hackers accessed the sensitive data of more than a million patients.

In a filing with Maine’s attorney general on Thursday, CHC said it detected suspicious activity on its network on 2 January and determined that a “skilled criminal hacker” had accessed its network to steal the health and personal information of more than a million patients. According to the filing, the hacker breached the organization’s network on October 14, 2024. 

CHC, which provides services including school-based healthcare and substance abuse programs to more than 100,000 Connecticut residents, said the compromised data may include patients’ addresses, phone numbers, diagnoses, treatment details, test results, Social Security numbers, and health insurance information.

The nonprofit said the hacker did not delete or encrypt any of its data and the incident has not affected its daily operations. No major cybercriminal group has claimed responsibility for the cyberattack yet.