Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Community Health Network

Disclosed May 6, 20193,600 affectedConfirmed

Official notice

The covered entity (CE), Community Health Network, Inc., reported that several employees were the victims of email phishing schemes. The email accounts contained the protected health information (PHI) of 6,600 individuals. The PHI involved included names, dates of birth, Social Security numbers, insurance information, diagnoses/conditions, lab results, and medication information. The CE notified HHS, affected individuals, and the media. As a result of this breach, the CE implemented additional technical safeguards and retrained its staff on the proper methods of identifying fraudulent email communications. OCR obtained assurances that the CE implemented the corrective actions noted.

What is known

People affected3,600 (as reported to HHS)
DisclosedMay 6, 2019
HappenedAug 14, 2019
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticein.gov
Indiana Attorney General 2019 data breach report: Community Health Network
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Community Health Network (Healthcare Provider, IN)

Notices filed

TotalMay 6, 2019
HHS archive3,600 people
Residents of INSep 12, 2019
Indiana AG1 person
Residents of INSep 13, 2019
Indiana AG1 person

Other breaches at Community Health Network

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSSep 15Hacking breachHacking exposed names and health records. Reported to the HHS archive.21K affectedHealthcareUSNov 17, 2023Insider breachInsider exposed names and health records. Reported to the HHS archive.1,237 affectedHealthcareUSMay 5, 2022Breach, details not statedBreach notice filed with the Indiana AG, details not stated.2 affectedHealthcareUSSep 15, 2021Hacking breachHacking exposed names and health records. Reported to the HHS archive.81K affectedHealthcareUSMay 14, 2020Breach, details not statedBreach notice filed with the Indiana AG, details not stated.6,600 affectedHealthcareUSJan 23, 2019Breach, details not statedBreach notice filed with the Indiana AG, details not stated.25 affectedHealthcareUSNov 14, 2016Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.650 affectedHealthcareUSNov 21, 2014
History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
1 to 3600by backfillSource
disclosed2026-09-25
2019-09-12 to 2019-05-06by backfillSource
summary2026-09-25
empty to The covered entity (CE), Community Health Network, Inc., reported that several employees were the victims of email phishing schemes. The email accounts contained the protected health information (PHI) of 6,600 individuals. The PHI involved by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Community Health Network