Breachesby GlyphCenter for Urban Community Services
Disclosed Jan 24, 202438,000 affectedConfirmed
The business associate (BA) reported that it experienced a cyberattack that compromised the protected health information (PHI) of 38,000 individuals. The PHI affected included names, dates of birth, drivers’ license and Social Security numbers, financial information, diagnoses/conditions, lab results, medications, and other treatment information. In response to the breach, the BA implemented additional administrative and technical safeguards.
What is known
| People affected | 38,000 (as reported to HHS) |
|---|---|
| Disclosed | Jan 24, 2024 |
| Happened | Sep 4, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Vermont Attorney General: 2024-07-03 Center for Urban Community Services Data Breach Notice to ConsumersVermont Attorney General: 2024-01-24 Center for Urban Community Services Data Breach Notice to ConsumersIndiana Attorney General 2024 data breach report: Center for Urban Community ServicesHHS OCR breach report (archive, resolved): Center for Urban Community Services (Business Associate, NY)
Notices filed
History of this record
other to healthby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
2266 to 38000by backfillSource
empty to The business associate (BA) reported that it experienced a cyberattack that compromised the protected health information (PHI) of 38,000 individuals. The PHI affected included names, dates of birth, drivers’ license and Social Security numbby backfillSource
empty to organizationby backfillSource
empty to 2266by backfillSource
empty to 2023-09-04by backfillSource
2024-07-03 to 2024-01-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.