Community Health Network

Disclosed May 14, 202081,118 affectedConfirmed

The covered entity (CE), Community Health Network, Inc., reported that its business associate (BA) experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 81,118 individuals. The ePHI involved included names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected	81,118 (as reported to HHS)
Disclosed	May 14, 2020
Happened	Jul 1, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2020 data breach report: Community Health Network

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Community Health Network (Healthcare Provider, IN)

Notices filed

Residents of INMay 14, 2020

Indiana AG5 people

Residents of INJul 31, 2020

Indiana AG8 people

TotalSep 11, 2020

HHS archive81,118 people

Residents of INOct 1, 2020

Indiana AG4 people

Other breaches at Community Health Network

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSSep 15 Hacking breachHacking exposed names and health records. Reported to the HHS archive.21K affectedHealthcareUSNov 17, 2023 Insider breachInsider exposed names and health records. Reported to the HHS archive.1,237 affectedHealthcareUSMay 5, 2022 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.2 affectedHealthcareUSSep 15, 2021 Hacking breachHacking exposed names and health records. Reported to the HHS archive.3,600 affectedHealthcareUSMay 6, 2019 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.6,600 affectedHealthcareUSJan 23, 2019 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.25 affectedHealthcareUSNov 14, 2016 Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.650 affectedHealthcareUSNov 21, 2014

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

8 to 81118by backfillSource

summary2026-09-25

empty to The covered entity (CE), Community Health Network, Inc., reported that its business associate (BA) experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 81,118 individuals. The ePHI inby backfillSource

records2026-09-25

7 to 8by backfillSource

disclosed2026-09-25

2020-10-01 to 2020-05-14by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Community Health Network