Community Health Center
Disclosed Jan 30, 20251 year ago1,060,936 affectedConfirmed
Hacker steals health data of over 1 million Connecticut patients
Connecticut nonprofit Community Health Center detected suspicious activity on January 2, 2025 and found a hacker had been in its network since October 14, 2024 and stole patient data including diagnoses, test results and Social Security numbers. No data was encrypted.
What is known
| People affected | 1,060,936 (as reported to HHS) |
|---|---|
| Disclosed | Jan 30, 2025 |
| Discovered | Jan 2, 2025 |
| Happened | Oct 14, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health, Addresses, Phone numbers, Social Security numbers, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Community Health Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report: Community Health Center (Healthcare Provider, CT)ocrportal.hhs.gov · Official notice | Official notice |
| US nonprofit healthcare provider says hacker stole medical and personal data of 1M+ patientstechcrunch.com · News | News |
| January 2025 Healthcare Data Breach Reporthipaajournal.com · News | News |
| Indiana Attorney General 2025 data breach report: Community Health Centerin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jan 30, 2025 | |
| HHS OCRtotal | Jan 30, 2025 | 1,060,936 |
| Researchtotal | Jan 30, 2025 | 1,060,936 |
| Indiana AGresidents of IN | Jan 30, 2025 | 251 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","addresses","phone","ssn","insurance"] · seed source
- 2026-09-25 · discovered: empty to 2025-01-02 · seed source
- 2026-09-25 · summary: empty to Connecticut nonprofit Community Health Center detected suspicious activity on January 2, 2025 and found a hacker had been in its network since October 14, 2024 and stole patient data including diagnoses, test results and Social Security num · seed source
- 2026-09-25 · title: empty to Hacker steals health data of over 1 million Connecticut patients · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1060936 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.